Millions of HTTP 302 Code Entries

[Ziad]

Hello,

I am getting millions of 302 status code (redirection) entries in my IIS log
files.
This occurs on custom built login pages: When employees try to log into
applications, enter a user id and password and submit, the page seems to
refresh many times per second, indefinitely, thus the huge logs (100 GB +)
mainly of 302 code entries.
Please note:
- This problem doesn't happen to all users. Actually, it seems to happen
randomly to random users.
- We are using IIS 6
- This occurs in .net applications we developed (see code snipet below)
- We are using a proxy

In our login page, we have the following line of code which we use to
redirect:

Response.Redirect(FormsAuthentication.GetRedirectUrl(txtUserName.Text,
false));

Note that initially users click on, say, http://intranet/myapp/default.aspx
which redirects them to a login screen, which contains the above code to take
them back to the default.aspx page.

Since it works fine most of the time (95%+) am I right to assume it is not a
coding problem?
Can someone please tell me what seems to be the problem?

Thanks,

Ziad



This is a typical log file entry:
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem
cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie)
cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes
time-taken
2009-03-06 14:06:46 W3SVC1 INTRANET 172.90.1.116 GET /myapp/login.aspx - 80
- 172.70.55.68 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729)
ASP.NET_SessionId=51hftveae3cy4b45gwbblw45;+adAuthCookie=448A553C87D7DDE44783DE07E35F172E0523B7463EDB9B9B769DB25DD90A5B9205E65AC3AC65DB3D21DF52C3D8DF575A2462A13CBA82B1D95D0F51AE3FB7A6;+SPSLastVisitedSitePage=%2fdefault.aspx;+SPSLastVisitedCatID=cb161298-6edf-4d92-b678-a880306bc8ef;+.ASPXAUTH=BCCA3571DE58494CE6A9BBDA39C6A58DF85A2C187B6FD0EDE982358C0C219C1A869C9E2B668972DC62C4CA6DDAF45EE01FD2830D530172934E6836CEA6ED8D62B4B1C6823D197FFC1CD1A550F449D0
http://intranet/default.aspx intranet 302 0 0 389 1137 15

 

[Ignacio Machin ( .NET/ C# MVP )]

Hello,

I am getting millions of 302 status code (redirection) entries in my IIS log
files.
This occurs on custom built login pages: When employees try to log into
applications, enter a user id and password and submit, the page seems to
refresh many times per second, indefinitely, thus the huge logs (100 GB +)
mainly of 302 code entries.
Please note:
- This problem doesn't happen to all users. Actually, it seems to happen
randomly to random users.
- We are using IIS 6
- This occurs in .net applications we developed (see code snipet below)
- We are using a proxy

In our login page, we have the following line of code which we use to
redirect:

Response.Redirect(FormsAuthentication.GetRedirectUrl(txtUserName.Text,
false));

Note that initially users click on, say,http://intranet/myapp/default.aspx
which redirects them to a login screen, which contains the above code to take
them back to the default.aspx page.

Since it works fine most of the time (95%+) am I right to assume it is not a
coding problem?
Can someone please tell me what seems to be the problem?

Humm, is it possible that you are creating a loop? from default you
get redirected to login and then from login you are redirected back to
default