[mod-security-users] Body too long

[Ed G. <ED...@ha...>]

So I have this the log entry below.  It says "Error reading request body: Partial results are valid but processing is incomplete"

I am in detection only.

1. Is this telling me that ModSecurity is not configured to process as long a body as it got, or is this a web server 500 error that would occur without ModSecurity.

2. If this is a ModSecurity report, would it block if I were in blocking mode?

3. How can I keep it from blocking since it has no Rule ID?

Thanks,

Ed Greenberg

--38543c13-A--
[14/Nov/2017:13:51:05 --0500] Wgs69gdLj0tOnkhg8ZrMuAAAAG0 50.241.60.65 50122 172.24.32.9 443
--38543c13-B--
POST /senddocumentowner.php HTTP/1.1
Host: www.xxxxx.com<www.assistancecheck.com>
Content-Type: multipart/form-data; boundary=----WebKitFormBoundary6DxqtI2HLODe4FCV
Origin: https://www.xxxxx.com<https://www.assistancecheck.com>
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=cbcj6pt8akib8ivnscit8kvp013g96c7c9ekg44e7vinp2ae3hj8bn439gdreuvbvmbpr1sn23insqalmlaoer6kuigfq5s98pdlpt2; __utma=29074220.1821188259.1500671716.1510265247.1510683769.39; __utmb=29074220.13.10.1510683769; __utmc=29074220; __utmz=29074220.1500671716.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/604.3.5 (KHTML, like Gecko) Version/11.0.1 Safari/604.3.5
Referer: https://www.xxxxx.com/senddocumentowner.php<https://www.assistancecheck.com/senddocumentowner.php>
Content-Length: 22152394
Accept-Language: en-us

--38543c13-F--
HTTP/1.1 500 Internal Server Error
Content-Length: 673
Connection: close
Content-Type: text/html; charset=iso-8859-1

--38543c13-E--

--38543c13-H--
Message: Error reading request body: Partial results are valid but processing is incomplete
Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client %s] ModSecurity: %s%s [uri "%s"]%s
Apache-Error: [file "mod_proxy_fcgi.c"] [line 940] [level 3] [status 70008] AH01075: Error dispatching request to %s:
Apache-Handler: proxy:unix:/var/run/php5-fpm.sock|fcgi://localhost
Stopwatch: 1510685430790638 34605275 (- - -)
Stopwatch2: 1510685430790638 34605275; combined=832, p1=501, p2=0, p3=64, p4=43, p5=164, sr=105, sw=60, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); CWAF_Apache.
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
Engine-Mode: "DETECTION_ONLY"

--38543c13-J--
Total,0

--38543c13-Z--




--

Ed Greenberg  |  Web Developer and LInux System Administrator
________________________________
HAPPY Software, Inc. l  Work HAPPY-er!
t. 888-484-2779  l  f. 518-584-5388

This message and any of its attachments are intended only for the use of the designated recipient, or the recipient’s designee, and may contain information that is confidential or privileged. If you are not the intended recipient, please immediately notify HAPPY Software, Inc., delete all copies of the message and any attachments and do not disseminate or make any use of their contents.