Re: [mod-security-users] ModSecurity: Audit log: Failed writing

[Ivan R. <iva...@gm...>]

I don't know. It depends on how the file is handled by the operating
system exactly. If this is an one-off you should probably ignore it.
If it happens all the time (without you doing anything) we should
investigate it.

On 2/16/07, Jerry <gm...@ho...> wrote:
> 39Gb free space.
>
> Could it be due to file locking?
>
> Say I was editing / viewing / copying the audit file at the time?
>
>
> "Ivan Ristic" <iva...@gm...> wrote in message
> news:1f9...@ma......
> > On 2/15/07, Jerry <gm...@ho...> wrote:
> >>
> >> [Thu Feb 15 18:20:12 2007]
> >> [error]
> >> [client xx.xx.xx.xx]
> >> ModSecurity: Audit log: Failed writing (requested 15i bytes, written 0i)
> >> [hostname "www.widgets.com"]
> >> [uri "/styles.css"]
> >> [unique_id "5Mq11sPy7C4AAAM1CyIAAAAA"]
> >>
> >> Is this something to worry about?
> >
> > Sounds like you've run out of disk space. That error message occurs
> > when ModSecurity fails to write to a file.
> >
> >>
> >> Nothing as far as I can tell was written to the audit.log at that time.
> >>
> >> ModSec 2.0.4, Apache 2.0.53, Centos 4.4
> >>
> >>
> >>
> >>
> >> -------------------------------------------------------------------------
> >> Take Surveys. Earn Cash. Influence the Future of IT
> >> Join SourceForge.net's Techsay panel and you'll get the chance to share
> >> your
> >> opinions on IT & business topics through brief surveys-and earn cash
> >> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> >> _______________________________________________
> >> mod-security-users mailing list
> >> mod...@li...
> >> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> >>
> >
> >
> > --
> > Ivan Ristic
> >
> > -------------------------------------------------------------------------
> > Take Surveys. Earn Cash. Influence the Future of IT
> > Join SourceForge.net's Techsay panel and you'll get the chance to share
> > your
> > opinions on IT & business topics through brief surveys-and earn cash
> > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>
>
>
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>


-- 
Ivan Ristic