<div>Thank you for your response.</div>
<div> </div>
<div>1. Inspecting the headers with Firebug is not an option as I don't have access to the system causing the problem (its not a virus / or bot, I'm pretty sure its one of our apps that is causing it).</div>
<div>2. $http_referer is already part of the access log format and is coming up blank.</div>
<div> </div>
<div>I am thinking of writing some custom code to catch this particular issue and see if I can get more info on it.</div>
<div> </div>
<div>Thanks<br><br></div>
<div class="gmail_quote">On Thu, Jan 15, 2009 at 3:35 PM, Juan Fco. Giordana <span dir="ltr"><<a href="mailto:juangiordana@gmail.com">juangiordana@gmail.com</a>></span> wrote:<br>
<blockquote style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid" class="gmail_quote">You could inspect the headers with firebug or similar tool or add the $http_referer variable to the log format to see what is causing that or even a rewrite rule to catch the request in a php script and logs its output in another file or in a DB.<br>
<br>Ilan Berkner wrote:<br>
<blockquote style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid" class="gmail_quote">
<div class="Ih2E3d">I previously posted a question about getting more information about an error that we're getting in our Nginx log files. The error is as follows:<br></div> 2009/01/15 11:47:57 [error] 15704#0: *689561 open() "/home/spellcit/public_html/letters/.mp3" failed (2: No such file or directory), client: 204.38.160.220, server: <a href="http://www.spellingcity.com/" target="_blank">www.spellingcity.com</a> <<a href="http://www.spellingcity.com/" target="_blank">http://www.spellingcity.com/</a>>, request: "GET /letters/.mp3 HTTP/1.1", host: "<a href="http://www.spellingcity.com/" target="_blank">www.spellingcity.com</a> <<a href="http://www.spellingcity.com/" target="_blank">http://www.spellingcity.com/</a>>"
<div class="Ih2E3d"><br>What I'm trying to figure out is which php or swf script (or maybe its not a php or swf script) is actually making the call to request this non-existent file.<br> Out of 25,385 errors in our log, 16,952 are caused by this issue.<br>
One of the suggestions I got was to turn on the access logs, which I did. In looking at this IP address at the access logs, this is what I get, which unfortunately is not much.<br><br>204.38.160.220 - - [15/Jan/2009:12:31:26 -0600] 404 "GET /letters/.mp3 HTTP/1.1" 169 "-" "Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02" "-"<br>
I was thinking about creating a dummy ".mp3" file (or rewrite rule) to capture traffic and get try to get some more info out of the header... just a thought.<br> Any suggestions / thoughts would be very much appreciated.<br>
Ilan<br></div></blockquote><br></blockquote></div><br>