access log shows large file downloaded in hundreds of 16756-byte chunks

Giganews Newsgroups
Subject: access log shows large file downloaded in hundreds of 16756-byte chunks
Posted by:  me (…@example.com)
Date: Thu, 1 Sep 2011

:-)

Can ayone tell me what could be the cause of this entry in my access log ?
At first I thought it was just a person angrily clicking away because the
file didn't download quickly enough, but most of the chunks are exactly
16756 bytes in size. My hoster has recently configured the server too keep
connections alive for 3 seconds, could this be related to it ? Or could it
be someone using a download accellerator, which uses several parallel
downloads ?

Marc.

(IP) - - [01/Sep/2011:13:30:16 +0200] "GET /filename.pdf HTTP/1.1" 206 16245
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:16 +0200] "GET /filename.pdf HTTP/1.1" 206 16757
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:16 +0200] "GET /filename.pdf HTTP/1.1" 206 15569
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:16 +0200] "GET /filename.pdf HTTP/1.1" 206 4979
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:16 +0200] "GET /filename.pdf HTTP/1.1" 206 882
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:16 +0200] "GET /filename.pdf HTTP/1.1" 206 882
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:17 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:17 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:17 +0200] "GET /filename.pdf HTTP/1.1" 206 1907
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:17 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:17 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:17 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(120 similar lines skipped...)
(IP) - - [01/Sep/2011:13:30:56 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:56 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:57 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:57 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:58 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:58 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:59 +0200] "GET /filename.pdf HTTP/1.1" 206 7759
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:30:59 +0200] "GET /filename.pdf HTTP/1.1" 206 15220
"-" "Mozilla/5.0 (UA)"
(a 135-second pause...)
(IP) - - [01/Sep/2011:13:33:14 +0200] "GET /filename.pdf HTTP/1.1" 206 48149
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:14 +0200] "GET /filename.pdf HTTP/1.1" 206 3955
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:14 +0200] "GET /filename.pdf HTTP/1.1" 206 882
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:14 +0200] "GET /filename.pdf HTTP/1.1" 206 883
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:14 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:15 +0200] "GET /filename.pdf HTTP/1.1" 206 1907
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:15 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(40 similar lines skipped...)
(IP) - - [01/Sep/2011:13:33:25 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:26 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:26 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:26 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:27 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"
(IP) - - [01/Sep/2011:13:33:27 +0200] "GET /filename.pdf HTTP/1.1" 206 16756
"-" "Mozilla/5.0 (UA)"

Replies