Skip to content

Instantly share code, notes, and snippets.

@zimmerle
Created June 12, 2020 16:35
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save zimmerle/c5f753e2dd5d1421d8374f901bec18af to your computer and use it in GitHub Desktop.
Save zimmerle/c5f753e2dd5d1421d8374f901bec18af to your computer and use it in GitHub Desktop.
[1591979490] [] [4] Initializing transaction
[1591979490] [] [4] Transaction context created.
[1591979490] [] [4] Starting phase CONNECTION. (SecRules 0)
[1591979490] [] [9] This phase consists of 0 rule(s).
[1591979490] [] [4] Starting phase URI. (SecRules 0 + 1/2)
[1591979490] [/] [4] Starting phase REQUEST_HEADERS.  (SecRules 1)
[1591979490] [/] [9] This phase consists of 0 rule(s).
[1591979490] [/] [4] Starting phase REQUEST_BODY. (SecRules 2)
[1591979490] [/] [9] This phase consists of 1 rule(s).
[1591979490] [/] [4] (Rule: 159) Executing operator "Rx" with param "3" against MODSEC_BUILD.
[1591979490] [/] [9] Target value: "030004100" (Variable: MODSEC_BUILD)
[1591979490] [/] [9] Matched vars updated.
[1591979490] [/] [4] Rule returned 1.
[1591979490] [/] [4] Executing chained rule.
[1591979490] [/] [4] (Rule: 0) Executing operator "InspectFile" with param "/bin/echo" against
MODSEC_BUILD.
[1591979490] [/] [9] Target value: "030004100" (Variable: MODSEC_BUILD)
[1591979490] [/] [8] Executing: /bin/echo. With parameters: 030004100
[1591979490] [/] [8] Process output: 030004100
[1591979490] [/] [9] Matched vars updated.
[1591979490] [/] [4] Rule returned 1.
[1591979490] [/] [9] This rule severity is: 2 current transaction is: 255
[1591979490] [/] [4] Running (disruptive)     action: deny.
[1591979490] [/] [8] Running action deny
[1591979490] [/] [9] This rule severity is: 2 current transaction is: 2
[1591979490] [/] [8] Skipping this phase as this request was already intercepted.
[1591979490] [/] [4] Starting phase RESPONSE_HEADERS. (SecRules 3)
[1591979490] [/] [9] This phase consists of 0 rule(s).
[1591979490] [/] [9] Appending response body: 100 bytes. Limit set to: 0.000000
[1591979490] [/] [9] Appending response body: 153 bytes. Limit set to: 0.000000
[1591979490] [/] [4] Starting phase RESPONSE_BODY. (SecRules 4)
[1591979490] [/] [4] Response body is disabled, returning... 2
[1591979490] [/] [4] Starting phase LOGGING. (SecRules 5)
[1591979490] [/] [9] This phase consists of 0 rule(s).
[1591979490] [/] [8] Checking if this request is suitable to be saved as an audit log.
[1591979490] [/] [8] Checking if this request is relevant to be part of the audit logs.
[1591979490] [/] [5] Audit log engine was not set.
[1591979490] [/] [8] Request was relevant to be saved. Parts: 4430
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment