[OpenStack-Infra] Logs for Ask.O.o - chasing false positive spam labeling

Jeremy Stanley fungi at yuggoth.org
Tue Jan 3 23:05:06 UTC 2017


On 2017-01-03 10:54:48 +0800 (+0800), Tom Fifield wrote:
[...]
> If you check for a POST after a GET of:
> 
> /admin/auth/user/2253/delete/
> 
> Around
> 
> 2017-02-03 02:52
> 
> from
> 
> 1.169.254.207
> 
> that should be it.

Assuming you mean 2017-01-03 then yes, I see one from that IP
address around the aforementioned time:

    1.169.254.207 - - [03/Jan/2017:02:51:47 +0000] "GET
    /admin/auth/user/2253/delete/ HTTP/1.1" 200 13733
    "https://ask.openstack.org/admin/auth/user/2253/" "Mozilla/5.0
    (X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101
    Firefox/50.0"

    1.169.254.207 - - [03/Jan/2017:02:52:02 +0000] "POST
    /admin/auth/user/2253/delete/ HTTP/1.1" 500 20828
    "https://ask.openstack.org/admin/auth/user/2253/delete/"
    "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101
    Firefox/50.0"

> I believe the OOM error comes from trying to view any post in the django
> admin interface (/admin/askbot/post/%d/ ) -- those things essentially never
> stop loading for some reason.

Makes sense. The 500 above does not coincide with any OOM event (nor
can I find anything to correlate it to in syslog, Apache error logs,
Askbot application logs, Solr/Jetty request or stderrout logs, et
cetera).
-- 
Jeremy Stanley



More information about the OpenStack-Infra mailing list