apache's default logging format can be horribly inaccurate in terms of data transferred
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apache2 (Ubuntu) |
Fix Released
|
Low
|
Unassigned |
Bug Description
Binary package hint: apache2
From <http://
| Note that in httpd 2.0, unlike 1.3, the %b and %B format strings do
| not represent the number of bytes sent to the client, but simply the
| size in bytes of the HTTP response (which will differ, for instance,
| if the connection is aborted, or if SSL is used). The %O format
| provided by mod_logio will log the actual number of bytes sent over
| the network.
Unfortunately the Ubuntu packages have a default LogFormat that uses
%b rather than %O. Could we please change that? (I'm told, by a
former Apache developer, that it's not any more expensive than %b.)
This is not a theoretical problem, with the default LogFormat we see
horrificly (and demonstrably) inaccurate logging of data transferred
from our ISO image servers.
Related branches
CVE References
Changed in apache2 (Ubuntu): | |
status: | Triaged → Confirmed |
Agrred. Logio is built statically in httpd - so no module needs to be enabled in order to have %O working.