RE: [mod-security-users] apache 2.0, mod_security_v1.9RC and log performance

[Tomas H. S. <thi...@te...>]

Hello Ivan,

=20

Log performance work fine!!

=20

Ufff...I'sorry. I had forgotten to add the line "include =
conf/mod_security.conf" in httpd.conf !!!!

=20

Now, the log file is:

=20

[20/Oct/2005:09:13:15 +0200] "GET /cgi-bin/modsec-test.pl HTTP/1.0" 200 =
- 194 1113 - 2155 10985 - 27282

[20/Oct/2005:09:13:15 +0200] "GET /cgi-bin/modsec-test.pl HTTP/1.0" 200 =
- 188 1128 - 2140 10965 - 27354

[20/Oct/2005:09:13:15 +0200] "GET /cgi-bin/modsec-test.pl HTTP/1.0" 200 =
- 192 1132 - 2221 11023 - 26966

[20/Oct/2005:09:13:16 +0200] "GET /cgi-bin/modsec-test.pl HTTP/1.0" 200 =
- 190 1109 - 2156 11026 - 27418

[20/Oct/2005:09:15:48 +0200] "GET /docs/images/ref.gif HTTP/1.1" 304 - =
505 166 - 1067 9833 - 10882

[20/Oct/2005:09:15:50 +0200] "GET /docs/api_c/api_core.html HTTP/1.1" =
304 - 586 167 - 738 9381 - 9899

[20/Oct/2005:09:15:53 +0200] "GET /docs/api_c/db_join.html HTTP/1.1" 200 =
- 499 6825 - 732 9357 - 10143

[20/Oct/2005:09:15:53 +0200] "GET /docs/images/api.gif HTTP/1.1" 304 - =
500 165 - 675 9088 - 9544

[20/Oct/2005:09:15:56 +0200] "GET /docs/api_c/dbm.html HTTP/1.1" 200 - =
493 9788 - 702 9216 - 9872

[20/Oct/2005:09:16:00 +0200] "GET /docs/api_c/txn_list.html HTTP/1.1" =
200 - 498 3289 - 722 9321 - 9963

=20

Many thanks for you help.

=20

=20

Tom=E1s Hidalgo Salvador

thi...@te...

Dpto. Sistemas Unix

Tlf.: 2333

DSF Almariya

=20

-----Mensaje original-----
De: Ivan Ristic [mailto:iv...@we...]=20
Enviado el: mi=E9rcoles, 19 de octubre de 2005 15:11
Para: Tomas Hidalgo Salvador
CC: mod...@li...
Asunto: Re: [mod-security-users] apache 2.0, mod_security_v1.9RC and log =
performance

=20

=20

   Can you verify that mod_security is active in that part of the site?

=20

   In your previous email I noticed you have SecFilterEngine set to

   DynamicOnly, and that the log entries were all static resources. If

   ModSecurity does not process a request it won't be able to generate

   the timing information. Try setting SecFilterEngine to "On".

=20

   Also, turn on the debug logging (at least level 4) and see if you

   have messages like "Time #1: 1591 usec" for every request.

=20

   If all this fails we'll just have to debug it. Send a private message

   to me if it doesn't work still.

=20

--=20

Ivan Ristic

Apache Security (O'Reilly) - http://www.apachesecurity.net

Open source web application firewall - http://www.modsecurity.org