cron/webalizer/oversized record

[Matt Florido]

On Sat, February 5, 2005 8:28 pm, Don Russell said:
> Everyday I get an e-mail from my Fecora Core 3 box with
> Subject: Cron <root at boris> run-parts /etc/cron.daily
>
> The message body contains a reference to webalizer and the several
> repeated lines regarding an oversized log record:
>
> /etc/cron.daily/00webalizer:
>
> Error: Skipping oversized log record
>
> rpm -q webalizer shows:
> webalizer-2.01_10-25
>
> This is on FC 3, and I've applied all the up2date updates
>
> I searched the list archives, but didn't see anything ....
>
> Does any body have any suggestions?
>

https://www.redhat.com/archives/fedora-list/2004-May/msg03141.html

"
> Subject: Cron <root machine> run-parts /etc/cron.daily
>
> /etc/cron.daily/00webalizer:
>
> Error: Skipping oversized log record

Just a typical (normal)webalizer error message, if it finds in the
access_log entries which are caused by attackers who use overlong
pattern access to try out vulnerabilities. Often those are just methods
to attack vulnerable IIS hosts and not Apache(2). See the access_log.1
for that entries.
"