Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 28 replies
  • Subscribers 0 subscribers
  • Views 6418 views
  • Users 0 members are here
Options
Suggested

[7.480][BUG][FIXED] Large downloads via Proxy are cut off prematurely

BrucekConvergent
I think this may be a rehash of an earlier bug report (from version 7.460, I think):

When I attempt to download large files via HTTP, say, a 900MB ISO file... I get maybe 80MB or so of the file (it varies somewhat) before IE or Firefox saves the file, claiming it's done... but it's not, the whole file did not download.  This is with the HTTP proxy enabled, running in transparent mode; THe AV settings are set to skip scanning a file over 100MB in size, so the AV should not be the problem -- the typical Astaro Download page is not displayed, the download just starts, as it should with it set this way.  Downloads from the same sites on 7.404 worked fine.  I checked all the logs (I mean everything).  The only event I can see that coincides from a time standpoint with the downloads dying is the up2date daemon checking for a pattern (or system, can't remember now) update... and there wasn't one available, so it wasn't like a lot of bandwidth was consumed, etc.  This sounds kind of like what I recall reading about earlier.

I'll post some log entries up here when I get time to pull them from the test system I was using.
Parents Reply Children
  • 0 in reply to Monarch
    Ian, yes, I am aware that Astaro is using a newer build of Snort now, but that shouldn't change the update process, etc. 

    Monarch, you are correct, this is the same issue as discussed before... I was concerned because that thread appeared to "die"... and the problem still exists.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Hi folks,
    that is also why I started another thread.

    Anyway the cron job is now running between 2and 15 minutes. I have changed the download of patterns to 6 hours, now 12, changed the software version update to 12 hours.

    Between cron and e_poll and supposedly repaired ADSL service that wasn't faulty, but now is I don't stand a chance.

    Looks like a cold start at least once a day for the moment.

    Ian M[:@]
  • 0 in reply to RFCat_vk_01
    Hi,
    some more thoughts and log file dumps.
    As I advised in the earlier post I had the pattern update set to 6 hours and the package update set to 15 minutes.

    The extract below doesn't look like 6 hours or 15 minutes. Now I have both set for 12 hour update there hasn't been an entry in the up2date log.
    Just wondering if one of the timers has a bug.

    Ian M
    2009:08:20-16:50:04 fw1-on-house audld[11560]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2009:08:20-17:11:01 fw1-on-house audld[12109]: Starting Up2Date Package Downloader (Version 1.57)
    2009:08:20-17:11:01 fw1-on-house audld[12109]: patch up2date possible
    2009:08:20-17:11:03 fw1-on-house audld[12109]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2009:08:20-17:25:01 fw1-on-house audld[12502]: Starting Up2Date Package Downloader (Version 1.57)
    2009:08:20-17:25:01 fw1-on-house audld[12502]: patch up2date possible
    2009:08:20-17:25:03 fw1-on-house audld[12502]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2009:08:20-17:34:02 fw1-on-house audld[12831]: Starting Up2Date Package Downloader (Version 1.57)
    2009:08:20-17:34:02 fw1-on-house audld[12831]: patch up2date possible
    2009:08:20-17:34:04 fw1-on-house audld[12831]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2009:08:20-17:53:01 fw1-on-house audld[13277]: Starting Up2Date Package Downloader (Version 1.57)
    2009:08:20-17:53:01 fw1-on-house audld[13277]: patch up2date possible
    2009:08:20-17:53:05 fw1-on-house audld[13277]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2009:08:20-17:55:01 fw1-on-house audld[13303]: Starting Up2Date Package Downloader (Version 1.57)
    2009:08:20-17:55:01 fw1-on-house audld[13303]: patch up2date possible
    2009:08:20-17:55:03 fw1-on-house audld[13303]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2009:08:20-18:04:02 fw1-on-house audld[13604]: Starting Up2Date Package Downloader (Version 1.57)
    2009:08:20-18:04:02 fw1-on-house audld[13604]: patch up2date possible
    2009:08:20-18:04:04 fw1-on-house audld[13604]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2009:08:20-18:23:01 fw1-on-house audld[14040]: Starting Up2Date Package Downloader (Version 1.57)
    2009:08:20-18:23:01 fw1-on-house audld[14040]: patch up2date possible
    2009:08:20-18:23:03 fw1-on-house audld[14040]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2009:08:20-18:38:01 fw1-on-house audld[14611]: Starting Up2Date Package Downloader (Version 1.57)
    2009:08:20-18:38:01 fw1-on-house audld[14611]: patch up2date possible
    2009:08:20-18:38:03 fw1-on-house audld[14611]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"

    2009:08:20-20:02:01 fw1-on-house /usr/sbin/cron[17382]: (root) CMD (  nice -n19 /usr/local/bin/gen_inline_reporting_data.plx)
    2009:08:20-20:05:01 fw1-on-house /usr/sbin/cron[17419]: (root) CMD (   /usr/local/bin/reportcontrol.sh)
    2009:08:20-20:08:24 fw1-on-house postgres[17372]: [3-1] LOG:  unexpected EOF on client connection
    2009:08:20-20:08:24 fw1-on-house postgres[17374]: [3-1] LOG:  unexpected EOF on client connection
    2009:08:20-20:10:01 fw1-on-house /usr/sbin/cron[17564]: (root) CMD (   /usr/local/bin/reportcontrol.sh)
    2009:08:20-20:10:01 fw1-on-house /usr/sbin/cron[703]: (*system*) RELOAD (/etc/crontab)
     There would appear to be a serious problem with the scheduling software as well as the way the cron job executes

    grasp any straw.
  • 0 in reply to Monarch
    This all reads very similar to our old thread here: http://www.astaro.org/astaro-beta-versions/asg-v7-500-beta/26360-7-450-bug-ack-http-connections-interrupted-av-update.html

    Regards,
    Monarch (back from holiday *g*)


    I had you covered, look here[;)]
  • 0 in reply to Billybob
    Hi folks,
    up2date processes set to 12 hours.
    No IPS, downloads work, up2date pattern went through while downloading, no break in the audio streaming.

    When can we expect a fix for some of us to try?

    Ian M
  • 0 in reply to RFCat_vk_01
    Interesting; I'll try the IPS deal; seems odd that I only experience the problem (even wth IPS enabled) when I'm using the HTTP Proxy (it happens to be in transparent mode).

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    FWIW, it looks like the problem is solved in 7.490... I'll keep testing it, but I had no problems performing large downloads yesterday.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Unfiltered HTML