"Peer closed connection: a timeout occurred"

--===============3614794458379772033==
Content-Type: multipart/alternative; boundary="000000000000bad51405f7ab5b20"

--000000000000bad51405f7ab5b20
Content-Type: text/plain; charset="UTF-8"

Hi All

I've inherited a project that uses modsecurity (wrapped in
jcmoraisjr/modsecurity-spoa <https://github.com/jcmoraisjr/modsecurity-spoa>
).
Looking at the modsecurity logs...I see plenty of legitimate log messages
when a SecRule is matched, but also
a TON of lines like this:

1679689652.575012 [01] <223243> Peer closed connection: a timeout occurred

There isn't any additional info around these log lines, I'd appreciate if
folks can help a newcomer out and
help give some context about what causes these messages. Does this indicate
a slow client attack?
The need to adjust some config?  Is this normal / expected?

Thanks for your time,
Stephen

--000000000000bad51405f7ab5b20
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div><div><div>Hi All<br><br></div>I&#39;ve inherited=
 a project that uses modsecurity (wrapped in <a href=3D"https://github.com/=
jcmoraisjr/modsecurity-spoa">jcmoraisjr/modsecurity-spoa</a>).<br></div>Loo=
king at the modsecurity logs...I see plenty of legitimate log messages when=
 a SecRule is matched, but also<br></div>a TON of lines like this:<br><br><=
span style=3D"font-family:monospace">1679689652.575012 [01] &lt;223243&gt; =
Peer closed connection: a timeout occurred<br><br></span></div><div><font f=
ace=3D"arial,sans-serif">There isn&#39;t any additional info around these l=
og lines, I&#39;d appreciate if folks can help a newcomer out and</font></d=
iv><div><font face=3D"arial,sans-serif">help give some context about what c=
auses these messages. Does this indicate a slow client attack?<br></font></=
div><div><font face=3D"arial,sans-serif">The need to adjust some config?=C2=
=A0 Is this normal / expected?<br><br></font></div><div><font face=3D"arial=
,sans-serif">Thanks for your time,</font></div><div><font face=3D"arial,san=
s-serif">Stephen<br></font></div></div>

--000000000000bad51405f7ab5b20--


--===============3614794458379772033==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============3614794458379772033==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

--===============3614794458379772033==--