Re: Needhost alert oddity

Hi Laszlo and Paul,

Apologies for the delayed thanks for your suggestions – I got side tracked. We will definitely look into your suggestions.

Much appreciated,

Sharon

From: Laszlo Gercsov <[email protected]>
Sent: 11 November 2019 23:14
To: Robinson, Sharon <[email protected]>; [email protected]
Subject: Re: Needhost alert oddity

​

CAUTION: This email originated from outside Edinburgh Napier University. Do not follow links or open attachments if you doubt the authenticity of the sender or the content.
Hi SHaron.

I believe you can use the EZproxy administration pages to find needed hosts.
On your EZProxy Administration page there is a link for "View server status".
On the server status page, you can use the "Find" function of your browser, usually Ctrl-F, and search for !!!
You should find matches in a table like this (I have removed extra lines) :-
SSL My Port Database Index JavaScript Enabled Host Created Accessed Counts Referenced Counts
...
Y !!! N sdfestaticassets-us-east-1.sciencedirectassets.com:443 2019-08-11 00:43:51 2019-11-11 21:22:55 366457 2019-11-12 08:52:32 2190417
...
Y !!! N pdf.sciencedirectassets.com:443 2019-08-11 00:53:36 2019-11-12 07:12:58 122944 2019-11-12 09:03:37 237326
...

Also, if you have login access to your ezproxy server, you can search for "599" codes in your log files. Change to the directory where you have your ezproxy logs and use this command :-
cat ezp*.log|grep '" 599 '|more

You should see lines like this (your config may specify different fields to be saved on your logs):-
54.70.40.11 - - - - [12/Nov/2019:07:12:42 +1100] "GET http://simsrad.net.ocs.mq.edu.au:80/login?qurl=http%3A%2F%2Fmultisearch.mq.edu.au%2FMQ%3APC_PLUS_LOCAL%3AMQ_ALMA51106372700002171 HTTP/1.1" 599 0 -

The "599" result code after the URL is followed by "0" bytes transferred and "-" for no referring URL.

I do not know the "Needhost alert" you have. I assume it is custom/additional software you have added to your EZproxy installation. You may need to ask someone to investigate why there is no requested host or URL. It does not make sense that a request should not have these, so your Needhost alert may need to be checked to make sure it is not picking up something which is not a request, or that the host/URL data is not being lost in the alert.

Best,

Laszlo.

Laszlo Gercsov

Senior Systems Analyst Library Systems

Library  |  Level 4
16 Macquarie Drive
Macquarie University, NSW 2109, Australia

T: +61 2 9850 6533 | F: +61 2 9850 7568

M: + 61 402 175 101  |  mq.edu.au/library<http://mq.edu.au/>

[Image removed by sender. Macquarie University]<http://mq.edu.au/>

CRICOS Provider Number 00002J. Think before you print.
Please consider the environment before printing this email.

This message is intended for the addressee named and may
contain confidential information. If you are not the intended
recipient, please delete it and notify the sender. Views expressed
in this message are those of the individual sender, and are not
necessarily the views of Macquarie University

________________________________
From: EZproxy List <[email protected]> on behalf of Robinson, Sharon <[email protected]>
Sent: Monday, 11 November 2019 7:49 PM
To: [email protected] <[email protected]>
Subject: [EZPROXY-L] Needhost alert oddity


Hi,



We’ve had the Needhost alert set up for quite a while now. In the last few days, I’ve seen a few examples of the following:



Timestamp = 10/11/2019 13:50:37



Referring url =



Requested url =



Requested host =



Does anyone have any suggestions about what could be producing this or where to look?



Thanks,



Sharon



Sharon Robinson BA (Newcastle), MA (Durham), MA (Northumbria)

Assistant Information Services Advisor



Learning and Research Services

Information Services

Edinburgh Napier University

Merchiston Campus

Edinburgh

EH10 5DT



Tel No:  0131 455 4266

Email:    [email protected]
Twitter: @EdNapITSupport<https://protect-au.mimecast.com/s/w0UlC91W8rCxz1lGsonKMo?domain=twitter.com> / @EdNapLib<https://protect-au.mimecast.com/s/Nr_yC0YKgRs4k871fD2cqX?domain=twitter.com>

You can check on the current status of our services via the new service status page.

[image002.png@01D5986C]<https://protect-au.mimecast.com/s/5YmECgZ05JfNqkoMH2s3Wi?domain=napier.ac.uk>



[CSE logo 2014]





















P Think about the environment before you print this email

“Edinburgh Napier University is a registered Scottish charity. Registration number SC018373.”







This message and its attachment(s) are intended for the addressee(s) only and should not be read, copied, disclosed, forwarded or relied upon by any person other than the intended addressee(s) without the permission of the sender. If you are not the intended addressee you must not take any action based on this message and its attachment(s) nor must you copy or show them to anyone. Please respond to the sender and ensure that this message and its attachment(s) are deleted.

It is your responsibility to ensure that this message and its attachment(s) are scanned for viruses or other defects. Edinburgh Napier University does not accept liability for any loss or damage which may result from this message or its attachment(s), or for errors or omissions arising after it was sent. Email is not a secure medium. Emails entering Edinburgh Napier University's system are subject to routine monitoring and filtering by Edinburgh Napier University.

Edinburgh Napier University is a registered Scottish charity. Registration number SC018373

________________________________

To unsubscribe from the EZPROXY-L list, click the following link:
http://listserv.oclclists.org/scripts/wa.exe?SUBED1=EZPROXY-L&A=1<https://protect-au.mimecast.com/s/LuI7Ck815RC4kNKxfJzt0C?domain=listserv.oclclists.org>

This message and its attachment(s) are intended for the addressee(s) only and should not be read, copied, disclosed, forwarded or relied upon by any person other than the intended addressee(s) without the permission of the sender. If you are not the intended addressee you must not take any action based on this message and its attachment(s) nor must you copy or show them to anyone. Please respond to the sender and ensure that this message and its attachment(s) are deleted.

It is your responsibility to ensure that this message and its attachment(s) are scanned for viruses or other defects. Edinburgh Napier University does not accept liability for any loss or damage which may result from this message or its attachment(s), or for errors or omissions arising after it was sent. Email is not a secure medium. Emails entering Edinburgh Napier University's system are subject to routine monitoring and filtering by Edinburgh Napier University.

Edinburgh Napier University is a registered Scottish charity. Registration number SC018373

********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences,
you can do so <a href="https://www.oclc.org/forms/internet-subscription.en.html">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
• To unsubscribe: "unsubscribe EZPROXY-L"
• To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
• To set your options to no mail: "set EZPROXY-L nomail"
• To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters),
please email us at [email protected].