Browsing my log files I notice this in httpd/ssl_engine_log:
25/Apr/2003 02:21:36 02575] [info] Seeding PRNG with 1160 bytes of entropy
[25/Apr/2003 02:21:36 02574] [info] Connection: Client IP: 202.47.226.1, Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits)
[25/Apr/2003 02:21:36 02574] [info] Initial (No.1) HTTPS request received for child 7 (server my.real.domain:443)
[25/Apr/2003 02:21:36 02574] [info] Connection to child 7 closed with unclean shutdown (server my.real.domain:443, client 202.47.226.1)
[25/Apr/2003 02:21:37 02575] [info] Connection: Client IP: 202.47.226.1, Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits)
[25/Apr/2003 02:21:37 02575] [info] Initial (No.1) HTTPS request received for child 8 (server my.real.domain:443)
[25/Apr/2003 02:21:37 02575] [info] Connection to child 8 closed with unclean shutdown (server my.real.domain:443, client 202.47.226.1)
[25/Apr/2003 02:21:38 02850] [info] Connection to child 11 established (server my.real.domain:443, client 202.47.226.1)
[25/Apr/2003 02:21:38 02850] [info] Seeding PRNG with 1160 bytes of entropy
[25/Apr/2003 02:21:38 02568] [info] Connection to child 1 established (server my.real.domain:443, client 202.47.226.1)
[25/Apr/2003 02:21:38 02568] [info] Seeding PRNG with 1160 bytes of entropy
[25/Apr/2003 02:21:39 02850] [info] Connection: Client IP: 202.47.226.1, Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits)
[25/Apr/2003 02:21:39 02850] [info] Initial (No.1) HTTPS request received for child 11 (server my.real.domain:443)
[25/Apr/2003 02:21:39 02850] [info] Connection to child 11 closed with unclean shutdown (server my.real.domain:443, client 202.47.226.1)
[25/Apr/2003 02:21:39 02850] [info] Initial (No.1) HTTPS request received for child 11 (server my.real.domain:443)
[25/Apr/2003 02:21:39 02850] [info] Connection to child 11 closed with unclean shutdown (server my.real.domain:443, client 202.47.226.1)
My entire log is full of near identical output.
Now, these are valid connections from valid clients. What I'm curious about is the unclean shutdowns. Can anyone explain whether they are normal or if there's a problem I should be fixing?
0 Replies
310 Views