1

I am seeing the issue in one of my web server access logs which is proxying to weblogic

...-0400] "GET /" 500 32

Can you suggest what this might mean. It is a sunone web server

mgorven
  • 30,036
  • 7
  • 76
  • 121
brooding_goat
  • 13
  • 4

2 Answers2

1

as @ceejayoz said 500 indicates the error response code. 32 is the size of the response in bytes.

I generated an example log for the "common" format log entry that sunone uses by default;

127.0.0.1 - - [10/Ma...100] "GET /Bg.png HTTP/1.1" 200 2445 <--- correct formatted HTTP request
127.0.0.1 - - [10/Ma...100] "GET /" 200 11172   <--- HTTP/1.0 request

The example request is missing a HTTP/1.1 from the request line, so its an old style (HTTP/0.9 compatible) HTTP/1.0 request. So it unlikely to be a request from a browser. It could be a manual telnet request e.g. telnet localhost 80, or someone using wget/curl in HTTP/1.0 mode, or a http client library.

As @mgorven mentioned, its a server error, hence it is either being returned locally from the default virtual server (because thats where the HTTP/1.0 requests end up) or from the remote proxied server.

Tom
  • 10,886
  • 5
  • 39
  • 62
  • Thanks for your explanation, but would this be a 500 response from the web server to the source which was hitting, or a response that it got back from the server to which it was proxying to. – brooding_goat May 10 '12 at 23:47
  • the docs for sunone are not that [revealing](http://docs.oracle.com/cd/E19199-01/817-1831-10/agaphttp.html#wp13183), indicating just a `Server error`. You can still match up the time of the log entry to the log files on the proxy-target instance, or if this is happening frequently from some host XXX then you could use `tcpdump -s0 -w /tmp/hostXXX host XXX` to capture the requests and inspect them fully. – Tom May 11 '12 at 04:33
  • also, just try it and see. do `telnet localhost 80` on the sunone server, and at the prompt type `GET /` and see what it puts in the logs – Tom May 11 '12 at 04:33
  • An badly formatted request should return status code [400](http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.1), so unless SunOne has a bug in this regard this doesn't explain what is happening. – mgorven May 13 '12 at 00:43
  • @mgorven hmm. i just checked the [rfc](http://tools.ietf.org/html/rfc1945#section-5) and it seems that a `GET /` request is a valid HTTP/1.0 request. So point taken about "badly formatted requests" . – Tom May 13 '12 at 02:29
0

This means that the request failed with status code 500, which indicates that an error occurred in the server. It could have occurred in either SunOne or WebLogic, so you need to check the error logs of both to determine why it happened. (If SunOne encountered a network problem when communicating with WebLogic it should return a 502 or 504 status code, so this is an actual application error.)

mgorven
  • 30,036
  • 7
  • 76
  • 121