john_k

msg:663560 | 6:06 am on Mar 31, 2004 (gmt 0) |
It indicates that an unhandled error occurred while trying to process the page. Some servers will include a little more info in the log entry. Almost all servers will attempt to send more of an error message back to the browser. (If you are using IE, be sure to turn off the option for showing friendly error messages.) Basically, these errors are specific to your site and to the page. You will need to troubleshoot the page(s) receiving the error.
|
Zaphod Beeblebrox

msg:663561 | 9:47 am on Mar 31, 2004 (gmt 0) |
Adding a Response.Flush at the top of your ASP page will often force IIS to display more information.
|
nkakar

msg:663562 | 4:42 pm on Mar 31, 2004 (gmt 0) |
thanks guys for the response! however, im seeing the internal server error on my webserver's logs everytime I analyze them through a inhouse software. i dont even know how to go upon handling it, because most of them say the following: 2004-03-30 00:54:58 X24.34.33.204 - 66.6.X28.51 80 GET /_vti_bin/owssvr.dllUL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 500 Mozilla/4.0 (compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) OR 2004-03-30 00:54:58 X24.34.33.204 - 66.6.X28.51 80 GET /_vti_bin/owssvr.dllUL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 500 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) Can someone please tell me what this means? [edited by: DaveAtIFG at 2:14 pm (utc) on April 1, 2004] [edit reason] Obscured IPs [/edit]
|
john_k

msg:663563 | 5:05 pm on Mar 31, 2004 (gmt 0) |
Yes. It means EITHER there is a bug in owssvr.dllUL such that the URL /_vti_bin/owssvr.dllUL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 causes an error that it does not handle internally OR You need a question mark in the URL after .dll i.e. should be /_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0
|
nkakar

msg:663564 | 6:07 pm on Mar 31, 2004 (gmt 0) |
thanks again John! do you think this can cause the orders on the website to be dropped?
|
nkakar

msg:663565 | 6:09 pm on Mar 31, 2004 (gmt 0) |
this is another one that shows up even more frequently than the previous one: 2004-03-30 03:53:55 66.X76.90.118 - 66.6.X28.51 80 GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 500 - really appreciate it :) [edited by: DaveAtIFG at 2:15 pm (utc) on April 1, 2004] [edit reason] Obscured IPs [/edit]
|
john_k

msg:663566 | 6:18 pm on Mar 31, 2004 (gmt 0) |
ah - the last one you posted is a hit from a worm attempting to exploit a vulnerable server. Perhaps the others were also - I don't recognize the name of the DLL and had thought it was one you use on your website. The fact that you are getting a 500 error may be bad or good - depends on the type of server you are on I think.
|
Zaphod Beeblebrox

msg:663567 | 11:22 am on Apr 1, 2004 (gmt 0) |
Check this: [webmasterworld.com...]
|
|