Date:  Thu, 5 Jun 2008 19:02:20 -0700 (PDT)
From:  Dan Kriwitsky <webhosting (at mark) yahoo.com>
Subject:  [coba-e:13172] Re: http://127.0.0.1:4664/preview
To:  coba-e (at mark) bluequartz.org
Message-Id:  <530724.58483.qm (at mark) web65602.mail.ac4.yahoo.com>
In-Reply-To:  <200806052340.27966.bq (at mark) solarspeed.net>
X-Mail-Count: 13172


--- Michael Stauber <bq (at mark) solarspeed.net> wrote:

> Hi Dan,
> 
> > Anyone know what would generate this in the access error_log?
> >
> > [Thu Jun 05 11:38:19 2008] [error] [client 66.182.222.13] Premature end
> of
> > script headers: cgiwrap, referer:
> >
>
http://127.0.0.1:4664/preview?event_id=158490&schema_id=2&q=canada&s=000000
> >000000000000000000000
> >
> > None of my sites in the virtual site list have Preview
> > Site Configuration checked.
> 
> No, no. The refering URL (the URL where the visitor came from!) was 
> http://127.0.0.1:4664/preview?event_id=....
> 
> If I'm not mistaken, then queries with a referer strings that starts 
> with  "http://127.0.0.1:4664/preview"; are usually from the 
> application "Google Desktop Search". That application was apparently
> running 
> on the local box of the person that came from the IP 66.182.222.13 to
> visit 
> one of your sites.
> 

If he visited one of my sites, his IP or rDNS should have been in my access
log? Unless, maybe someone had saved the URL of a former CGI script on my
server?

-- 
Dan Kriwitsky