[7.890][NOTABUG][CLOSED] 3.2gb of HTTP log

Hi,
I found the culprit I think, websec-reporter appears to be logging the streaming traffic.

I think there needs to be an urgent up2date release to fix this.

Ian M

Can you post log excerpts please? We're especially interested in the fallback log, because that shouldn't be growing that fast.

For the http proxy log: Svens has added some DEBUG messages to the logging to narrow down the path to the segfault problems. I assume that you are suffering from these additional messages. Can you give us some example of the streaming traffic that you mentioned? It would be nice to see if there is a certain pattern.

Hi,
extract from the fallback log,

2010:03:12-06:53:02 fw1-on-house [user:notice] mw7It38eTMxbZ5uZAHQBZgY+EYr4g4TrYiWkJfakWGY5lkaP:  "company_text_charset": "utf-8", "company_text": "Astaro Security Gateway Version 7b\nThis will be a basket case.   http:\/\/www.astaro.com\nAdministrator reg_im@iinet.net.au" }"
2010:03:12-06:53:02 fw1-on-house [user:notice] mw7It38eTMxbZ5uZAHQBZgY+EYr4g4TrYiWkJfakWGY5lkaP:  "company_text_charset": "utf-8", "company_text": "Astaro Security Gateway Version 7b\nThis will be a basket case.   http:\/\/www.astaro.com\nAdministrator reg_im@iinet.net.au" }"
2010:03:12-06:53:02 fw1-on-house [user:notice] mw7It38eTMxbZ5uZAHQBZgY+EYr4g4TrYiWkJfakWGY5lkaP:  "company_text_charset": "utf-8", "company_text": "Astaro Security Gateway Version 7b\nThis will be a basket case.   http:\/\/www.astaro.com\nAdministrator reg_im@iinet.net.au" }"
2010:03:12-06:53:02 fw1-on-house [user:notice] mw7It38eTMxbZ5uZAHQBZgY+EYr4g4TrYiWkJfakWGY5lkaP:  "company_text_charset": "utf-8", "company_text": "Astaro Security Gateway Version 7b\nThis will be a basket case.   http:\/\/www.astaro.com\nAdministrator reg_im@iinet.net.au" }"
2010:03:12-06:53:02 fw1-on-house [user:notice] mw7It38eTMxbZ5uZAHQBZgY+EYr4g4TrYiWkJfakWGY5lkaP:  "company_text_charset": "utf-8", "company_text": "Astaro Security Gateway Version 7b\nThis will be a basket case.   http:\/\/www.astaro.com\nAdministrator reg_im@iinet.net.au" }"
2010:03:12-06:53:02 fw1-on-house [user:notice] mw7It38eTMxbZ5uZAHQBZgY+EYr4g4TrYiWkJfakWGY5lkaP:  "company_text_charset": "utf-8", "company_text": "Astaro Security Gateway Version 7b\nThis will be a basket case.   http:\/\/www.astaro.com\nAdministrator reg_im@iinet.net.au" }"
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:02 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:07 fw1-on-house [user:notice] URL:  rad.msn.com/
2010:03:12-06:53:07 fw1-on-house [user:notice] ]":  
2010:03:12-06:53:07 fw1-on-house [user:notice] URL:  -1 -46 22065 rad.msn.com/ 141,177
2010:03:12-06:53:07 fw1-on-house [user:notice] ],:  timediff 65"
2010:03:12-06:53:07 fw1-on-house [user:notice] URL:  -1 -46 22065 rad.msn.com/ 141,177

From what little I could see from the content filter (http/s) file last night  the information looked very similar to the fallback log.

I can't access the archive other than copy it to my PC. I cannot open the active content filter log. The current log is is 4.6gb.
I receive the message in the attached jpeg.

Ian M

Yes, seems like there's still debug enabled. I'll disable it, as soon as i get access to your Box.

Sven.

Since this is due to SvenS debugging, i close this one now