Whare are OPTIONS, LOCK and PROPFIND methods?

Joseph Geretz

unread,

Jun 8, 2003, 9:57:30 PM6/8/03

to

Can you please explain these IIS log entries to me? The first entry shows a
GET, the user is requesting Resume.doc, a Word file on my site. But then
what are the next entries OPTIONS, LOCK and PROPFIND?

Thanks for your help!

- Joe Geretz -

2003-06-07 19:40:37 68.193.191.191 - 192.168.1.3 81 GET
/FPSNow/ftp/download/Resume/Resume.doc - 200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322)

2003-06-07 19:40:39 68.193.191.191 - 192.168.1.3 81 OPTIONS / - 200
Microsoft+Data+Access+Internet+Publishing+Provider+Protocol+Discovery

2003-06-07 19:40:39 68.193.191.191 - 192.168.1.3 81 OPTIONS
/FPSNow/ftp/download/Resume/Resume.doc - 200
Microsoft+Data+Access+Internet+Publishing+Provider+Protocol+Discovery

2003-06-07 19:40:39 68.193.191.191 - 192.168.1.3 81 LOCK
/FPSNow/ftp/download/Resume/Resume.doc - 403
Microsoft+Data+Access+Internet+Publishing+Provider+DAV

2003-06-07 19:40:39 68.193.191.191 - 192.168.1.3 81 GET
/FPSNow/ftp/download/Resume/Resume.doc - 304
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322)

2003-06-07 20:05:00 68.193.191.191 - 192.168.1.3 81 PROPFIND
/FPSNow/ftp/download/Resume - 207
Microsoft+Data+Access+Internet+Publishing+Provider+DAV

2003-06-07 20:05:00 68.193.191.191 - 192.168.1.3 81 OPTIONS / - 200
Microsoft+Data+Access+Internet+Publishing+Provider+Protocol+Discovery

2003-06-07 20:05:00 68.193.191.191 - 192.168.1.3 81 OPTIONS
/FPSNow/ftp/download/Resume - 200
Microsoft+Data+Access+Internet+Publishing+Provider+Protocol+Discovery

2003-06-07 20:05:02 68.193.191.191 - 192.168.1.3 81 PROPFIND
/FPSNow/ftp/download/Resume - 207
Microsoft+Data+Access+Internet+Publishing+Provider+DAV

Keith W. McCammon

unread,

Jun 9, 2003, 8:44:59 AM6/9/03

to

Likely someone looking to exploit the recent vulnerabilities associated with
Windows components used by WebDAV.

"Joseph Geretz" <jge...@nospam.com> wrote in message
news:e2H8$piLDH...@TK2MSFTNGP09.phx.gbl...

Matt Scarborough

unread,

Jun 10, 2003, 1:33:12 AM6/10/03

to

On Sun, 8 Jun 2003 21:57:30 -0400, Joseph Geretz wrote
<e2H8$piLDH...@TK2MSFTNGP09.phx.gbl>

> Can you please explain these IIS log entries to me? The first entry shows
a
> GET, the user is requesting Resume.doc, a Word file on my site. But then
> what are the next entries OPTIONS, LOCK and PROPFIND?

http://www.iisfaq.com/default.aspx?View=A489

Matt Scarborough 2003-06-10