[OpenStack-Infra] Logs for Ask.O.o - chasing false positive spam labeling
Jeremy Stanley
fungi at yuggoth.org
Tue Jan 3 23:05:06 UTC 2017
On 2017-01-03 10:54:48 +0800 (+0800), Tom Fifield wrote:
[...]
> If you check for a POST after a GET of:
>
> /admin/auth/user/2253/delete/
>
> Around
>
> 2017-02-03 02:52
>
> from
>
> 1.169.254.207
>
> that should be it.
Assuming you mean 2017-01-03 then yes, I see one from that IP
address around the aforementioned time:
1.169.254.207 - - [03/Jan/2017:02:51:47 +0000] "GET
/admin/auth/user/2253/delete/ HTTP/1.1" 200 13733
"https://ask.openstack.org/admin/auth/user/2253/" "Mozilla/5.0
(X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101
Firefox/50.0"
1.169.254.207 - - [03/Jan/2017:02:52:02 +0000] "POST
/admin/auth/user/2253/delete/ HTTP/1.1" 500 20828
"https://ask.openstack.org/admin/auth/user/2253/delete/"
"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101
Firefox/50.0"
> I believe the OOM error comes from trying to view any post in the django
> admin interface (/admin/askbot/post/%d/ ) -- those things essentially never
> stop loading for some reason.
Makes sense. The 500 above does not coincide with any OOM event (nor
can I find anything to correlate it to in syslog, Apache error logs,
Askbot application logs, Solr/Jetty request or stderrout logs, et
cetera).
--
Jeremy Stanley
More information about the OpenStack-Infra
mailing list