I'm running tclhttpd cvs on a Win32 system. I looked in
the /tmp directory today and discovered the error log
is 350MB. This is due to lots of script kiddies trying
stack smashing exploits of some kind.
Firstly: it doesn't really help to save the entire
shellcode exploit in the log files -- so I suggest a
limit to the amount of a query that gets logged.
Second: how about an option to have the error logs
dated the way that the access logs currently are. As
it stands I have to stop the server before I can
delete/rename the file as windows considers it open and
will not let me move it (although I can likely truncate
it).