Access logs showing curious entries

Wowza Streaming Engine
1

Hi, can someone explain me what kind of entries are this and for what they are? I cannot assign them.

#Version: 1.0 #Start-Date: 2020-01-29 00:00:00 GMT #Software: Wowza Streaming Engine 4.7.8 build20191105123929 #Date: 2020-01-29 #Fields: date time tz x-category x-event x-severity x-status x-ctx x-app x-duration c-ip c-referrer c-user-agent c-client-id cs-bytes sc-bytes cs-stream-bytes sc-stream-bytes x-sname x-suri-stem x-file-size x-file-length x-spos 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.279 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.28 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.281 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.282 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.283 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.284 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.285 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.286 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.287 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.287 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.289 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.289 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.29 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.29 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.291 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.291 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.292 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.293 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.294 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.294 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.296 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.296 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.297 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.297 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.3 - - - - - - - - - - - - - 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.301 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.303 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.304 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.305 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.306 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.307 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.308 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.309 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.309 - - - - - - - - - - - – 2020-01-29 20:41:12 GMT server comment INFO 200 - - 20662.31 - - - - - - - - - - - –

2

Do you happen to have anything custom installed as in modules or applications you added to your Engine workflows @Paul Toronowski? Did you recently upgrade to 4.7.8 by any chance? There were some breaking changes in 4.7.8.

If not,I checked with our engineers and they would like to see a support ticket please. Unfortunately, that error log is not specific to any one cause as you have discovered through your own research. It will require a complete review of your config and logs to determine where the problem may be.

You can submit here:

https://www.wowza.com/support/open-ticket

3

Yes, we have an application witch is using the streamPublisher plug-in. But we are using Wowza Streaming Engine for about 4 years with this plug-in and i never notices such kind of entries.

We are running wowza streaming engine in a docker container and updating it through docker pull and mounting the config folder. Is there maybe en other reason for such kind of logs?. Maybe hacker attacks? We have on this streaming engine about 5TB traffic a day.

4

Ok thank you so much for the additional info. Please submit a ticket right away so we can take a closer look and see what is happening here. The engineers did take a look and cannot identify the cause of these logs.

5

Ok thank you so much for the additional info. Please submit a ticket right away so we can take a closer look and see what is happening here. The engineers did take a look and cannot identify the cause of these logs.