Mailing List Archive: Linux Virtual Server: Users

[lvs-users] Anyone using lvs with joomla?

Index | Next | Previous | View Threaded

lists at grounded

Apr 15, 2009, 9:58 AM

Post #1 of 7 (1132 views)
Permalink

[lvs-users] Anyone using lvs with joomla?

Can't seem to find the right send/expect code which will work well with a joomla site. I keep getting tons of chatter in the web logs because I don't have it right. Is anyone using joomla, who could share their send/expect codes so that I can try it.

This is what I'm seeing in the web logs.

Apr 15 10:57:49 cweb93 httpd[11416]: [error] [client 192.168.1.75] PHP Notice: Undefined index: HTTP_HOST in /var/www/html
/index.php on line 28

Thanks.

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

lists at grounded

Apr 15, 2009, 10:14 AM

Post #2 of 7 (1083 views)
Permalink

Re: [lvs-users] Anyone using lvs with joomla? [In reply to]

> Try tcpdump or wireshark and record an actual request made by a
> browser.
> Wireshark's follow tcp connection function should give you a nice string
> to send, just replace all the line breaks with \r\n (or was that \n\r?)

Good suggestion, I'll give that a try and report, thanks.

lists at grounded

Apr 15, 2009, 10:20 AM

Post #3 of 7 (1077 views)
Permalink

Re: [lvs-users] Anyone using lvs with joomla? [In reply to]

> Try tcpdump or wireshark and record an actual request made by a
> browser.
> Wireshark's follow tcp connection function should give you a nice string
> to send, just replace all the line breaks with \r\n (or was that \n\r?)

I must be missing an option using tcpdump. I can see the port 80 connections just fine but am not seeing any HTTP type events.

lists at grounded

Apr 15, 2009, 11:43 AM

Post #4 of 7 (1089 views)
Permalink

Re: [lvs-users] Anyone using lvs with joomla? [In reply to]

> You could try -X, but I usually use -s 9999 -w /tmp/file.dump and
> examine the dump file in wireshark locally.

That did it, I'm able to see the data now.

12:43:34.322207 IP 192.168.1.200.hotu-chat > www.xxx.com.http: P 1:488(487) ack 1 win 65535
0x0000: 4500 020f 55c1 4000 8006 1eb2 c0a8 01c8 E...U.@.........
0x0010: c0a8 015d 0d79 0050 0d59 51eb 3fcf d93c ...].y.P.YQ.?..<
0x0020: 5018 ffff d9cd 0000 4745 5420 2f20 4854 P.......GET./.HT
0x0030: 5450 2f31 2e31 0d0a 486f 7374 3a20 3139 TP/1.1..Host:.19
0x0040: 322e 3136 382e 312e 3933 0d0a 5573 6572 2.168.1.93..User
0x0050: 2d41 -A
12:43:34.322299 IP www.xxx.com.http > 192.168.1.200.hotu-chat: . ack 488 win 6432
0x0000: 4500 0028 6270 4000 4006 53ea c0a8 015d E..(bp@.@.S....]
0x0010: c0a8 01c8 0050 0d79 3fcf d93c 0d59 53d2 .....P.y?..<.YS.
0x0020: 5010 1920 8a3e 0000 P....>..
12:43:34.387595 IP www.xxx.com.http > 192.168.1.200.hotu-chat: . 1:1461(1460) ack 488 win 6432
0x0000: 4500 05dc 6271 4000 4006 4e35 c0a8 015d E...bq@.@.N5...]
0x0010: c0a8 01c8 0050 0d79 3fcf d93c 0d59 53d2 .....P.y?..<.YS.
0x0020: 5010 1920 b66a 0000 4854 5450 2f31 2e31 P....j..HTTP/1.1
0x0030: 2032 3030 204f 4b0d 0a44 6174 653a 2057 .200.OK..Date:.W
0x0040: 6564 2c20 3135 2041 7072 2032 3030 3920 ed,.15.Apr.2009.
0x0050: 3137 17

So, the relevant parts I'm looking for are the GET HTTP and reply right?

lists at grounded

Apr 16, 2009, 8:20 AM

Post #5 of 7 (1071 views)
Permalink

Re: [lvs-users] Anyone using lvs with joomla? [In reply to]

Can't seem to send you the header captures, the clamav on the mailing list keeps rejecting it as;

Remote host said: 550 ClamAV detected Sanesecurity.Phishing.Bank.3259.UNOFFICIAL

I've contacted the clamav folks about this.

Mike

> actually, the payload of the packages is stil truncated, you'll have
> to add -s 1500 (or -s 9999) to see everything. The User-Agent Header
> is cut off in the middle.
>
>
> regards,
>
>
> rainer

graeme at graemef

Apr 16, 2009, 12:07 PM

Post #6 of 7 (1061 views)
Permalink

Re: [lvs-users] Anyone using lvs with joomla? [In reply to]

On Thu, 2009-04-16 at 10:47 -0500, lists [at] grounded wrote:
> Can't seem to send you the header captures, the clamav on the mailing list keeps rejecting it as;
>
> Remote host said: 550 ClamAV detected Sanesecurity.Phishing.Bank.3259.UNOFFICIAL
>
> I've contacted the clamav folks about this.

...who would probably refer you to me, as I'm the mailing list admin and
it's my machine doing the rejections. Additionally, the SaneSecurity
signatures aren't anything to do with the ClamAV people at all!

All of which is completely irrelevant, anyway.

You have Joomla running under a (or more than one) virtual host under
Apache. You need to use the "ServerName" or one of the "ServerAlias"
directives from that virtual host as part of the request.
If you had a vhost with
ServerName joomla.grounded.net

Then your request/response strings would be

send = "GET / HTTP/1.1\r\nHost: joomla.grounded.net\r\n\r\n"
expect = "HTTP/1.1 200 OK"

...which I'm pretty sure I outlined some time ago, perhaps not as
clearly.

If you continue to get log entries regarding HTTP_HOST then you need to
go to the Joomla folks, I'm afraid. Web applications are pretty off
topic (in that level of detail) for this list.

Graeme

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

lists at grounded

Apr 16, 2009, 2:01 PM

Post #7 of 7 (1060 views)
Permalink

Re: [lvs-users] Anyone using lvs with joomla? [In reply to]

> You have Joomla running under a (or more than one) virtual host under
> Apache. You need to use the "ServerName" or one of the "ServerAlias"
> directives from that virtual host as part of the request.
> If you had a vhost with
> ServerName www.xxx.com

A joomla site is the top/starting site on the server which does host other virtual hosts.

> send = "GET / HTTP/1.1\r\nHost: www.xxx.com\r\n\r\n"
> expect = "HTTP/1.1 200 OK"

Here, I thought I was looking for something much more complicated but now it makes sense, it's the exact output from the server.

> ...which I'm pretty sure I outlined some time ago, perhaps not as
> clearly.

It's not something I work with daily so no, it's not something that would have made much sense :).

> If you continue to get log entries regarding HTTP_HOST then you need to
> go to the Joomla folks, I'm afraid. Web applications are pretty off
> topic (in that level of detail) for this list.

I came to the lvs list thinking that I just needed to figure out the right get/expect entries. I did post on some other forums as well but got nothing. I've also asked about how I'm going to modify this to work with squid in front of the servers. Right now, lvs is going directly to the servers but I want to put squid in front of them. I have one working now but haven't found the get/expect code that works.

Using this thread, I'll try to figure that out though suspect that life has beaten me to the point of exhaustion this week so probably won't figure it out.

Thanks again for this help, it's very appreciated and I'll review the thread.

Mike

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users [at] LinuxVirtualServer
Send requests to lvs-users-request [at] LinuxVirtualServer
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads