Millions of HTTP 302 Code Entries

Hello,

I am getting millions of 302 status code (redirection) entries in my IIS log
files.
This occurs on custom built login pages: When employees try to log into
applications, enter a user id and password and submit, the page seems to
refresh many times per second, indefinitely, thus the huge logs (100 GB +)
mainly of 302 code entries.
Please note:
- This problem doesn't happen to all users. Actually, it seems to happen
randomly to random users.
- We are using IIS 6
- This occurs in .net applications we developed (see code snipet below)
- We are using a proxy

In our login page, we have the following line of code which we use to
redirect:

Response.Redirect(FormsAuthentication.GetRedirectUrl(txtUserName.Text,
false));

Note that initially users click on, say, http://intranet/myapp/default.aspx
which redirects them to a login screen, which contains the above code to take
them back to the default.aspx page.

Since it works fine most of the time (95%+) am I right to assume it is not a
coding problem?
Can someone please tell me what seems to be the problem?

Thanks,

Ziad



This is a typical log file entry:
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem
cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie)
cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes
time-taken
2009-03-06 14:06:46 W3SVC1 INTRANET 172.90.1.116 GET /myapp/login.aspx - 80
- 172.70.55.68 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729)
ASP.NET_SessionId=51hftveae3cy4b45gwbblw45;+adAuthCookie=448A553C87D7DDE44783DE07E35F172E0523B7463EDB9B9B769DB25DD90A5B9205E65AC3AC65DB3D21DF52C3D8DF575A2462A13CBA82B1D95D0F51AE3FB7A6;+SPSLastVisitedSitePage=%2fdefault.aspx;+SPSLastVisitedCatID=cb161298-6edf-4d92-b678-a880306bc8ef;+.ASPXAUTH=BCCA3571DE58494CE6A9BBDA39C6A58DF85A2C187B6FD0EDE982358C0C219C1A869C9E2B668972DC62C4CA6DDAF45EE01FD2830D530172934E6836CEA6ED8D62B4B1C6823D197FFC1CD1A550F449D0
http://intranet/default.aspx intranet 302 0 0 389 1137 15

.

Relevant Pages

  • Re: Millions of HTTP 302 Code Entries
    ... I am getting millions of 302 status code (redirection) entries in my IIS log ... This occurs on custom built login pages: When employees try to log into ...
    (microsoft.public.dotnet.languages.csharp)
  • Blank screen when certain users log into server
    ... the admin login or one other ... Failed to perform redirection of folder Desktop. ... my NETLOGON share on the Domain Controller) ...
    (microsoft.public.windows.terminal_services)
  • Re: Url Redirection
    ... for your add-in shell code, you can always first establish a initial http ... if you're not login yet and redirected, ... Subject: Url Redirection ... I don't seem to have any control over this as it's all handled ...
    (microsoft.public.dotnet.framework.aspnet)
  • Redirect Favorites Folder via GPO
    ... You could set the key at login via a script. ... Folder redirection in place for -My ... >working can add favorites, when logging off and on again ...
    (microsoft.public.win2000.security)
  • Re: foreign ip in /var/log/wtmp
    ... That's normally a login ... you reported differences in the wtmp entries ... between logging in via ssh verses logging in over the console. ...
    (comp.os.linux.security)
Quantcast