Thread Info
  • State Not Answered
  • Replies 17 replies
  • Subscribers 0 subscribers
  • Views 9174 views
  • Users 0 members are here
Options
Suggested

[8.160][NOTABUG][CLOSED] Input/output error HTTP

wingman
Hi All

I am getting input/output error whilst browsing

Thanks 

2011:03:04-17:44:56 *******  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xd616ef58" function="read_response_body_file_chunked" file="response.c" line="934" message="recv: Input/output error"

2011:03:04-17:44:56 *******  httpproxy[8535]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.2.1" dstip="66.220.158.32" user="" statuscode="502" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="4530" request="0xd616ef58" url="www.facebook.com/


It's info (severity) but I haven't had any such messages on 8.xx before
  • 0 
    Astaro Beta Report
    --------------------------------
    Version: 8.160
    Type: NOTABUG
    State: CLOSED
    Reporter: wingman
    Contributor: 
    MantisID: 
    Target version: 
    Fixed in version: 
    --------------------------------

  • 0
    Can you make a packet capture (tcpdump) of that stream and upload it here? Otherwise we won't be able to find out what happens there...
  • 0
    I only had two instances (nothing today). I am not able to do a packet capture today. 

    2011:03:04-17:44:56 ****** httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="69.63.176.59" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="14336" request="0xcafde238" url="secure-media-sf2p.facebook.com/.../jpeg"

    2011:03:04-17:44:56 ****** httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xd616ef58" function="ssl_log_errors" file="ssl.c" line="49" message="S 66.220.158.32: 4044454768:error:1409F07F:SSL routines:SSL3_WRITE_PENDING:bad write retry:s3_pkt.c:731:

    2011:03:04-17:44:56 ****** httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xd616ef58" function="ssl_log_errors" file="ssl.c" line="49" message="S 66.220.158.32: 4044454768:error:1409F07F:SSL routines:SSL3_WRITE_PENDING:bad write retry:s3_pkt.c:731:

    2011:03:04-17:44:56 ****** httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xd616ef58" function="read_response_body_file_chunked" file="response.c" line="934" message="recv: Input/output error"

    2011:03:04-17:44:56 ****** httpproxy[8535]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.2.1" dstip="66.220.158.32" user="" statuscode="502" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="4530" request="0xd616ef58" url="www.facebook.com/

    2011:03:04-17:44:57 ****** httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="2745" request="0xcb149df8" url="passthrough.fw-notify.net/.../default.js" exceptions="" error=""

    2011:03:04-17:44:59 ****** httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="66.220.151.87" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="25" request="0xcaf080e0" url="0-195.channel.facebook.com/.../plain"
  • 0
    We think that it's a problem on the server side (not on the ASG), but to be sure we need to take a look at the packet capture
  • 0
    Just had another input/output error with Facebook. Relevant log: 

    2011:03:18-21:52:46 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9687168" function="ssl_log_errors" file="ssl.c" line="49" message="S 88.221.162.110: 4094995312:error:1409F07F:SSL routines:SSL3_WRITE_PENDING:bad write retry:s3_pkt.c:731:

    2011:03:18-21:52:46 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9687168" function="ssl_log_errors" file="ssl.c" line="49" message="S 88.221.162.110: 4094995312:error:1409F07F:SSL routines:SSL3_WRITE_PENDING:bad write retry:s3_pkt.c:731:

    2011:03:18-21:52:46 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9687168" function="read_response_body_file_chunked" file="response.c" line="934" message="readbuf: reading chunksize: Input/output error"

    2011:03:18-21:52:46 *******  httpproxy[13585]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.2.1" dstip="88.221.162.110" user="" statuscode="502" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="4609" request="0x9687168" url="s-static.ak.facebook.com/.../x-javascript"

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9379d80" function="ssl_log_errors" file="ssl.c" line="49" message="S 88.221.162.110: 4053031792:error:1409F07F:SSL routines:SSL3_WRITE_PENDING:bad write retry:s3_pkt.c:731:

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9379d80" function="read_response_body_file_chunked" file="response.c" line="934" message="readbuf: reading chunksize: Input/output error"

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.2.1" dstip="88.221.162.110" user="" statuscode="502" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="4625" request="0x9379d80" url="s-static.ak.facebook.com/.../WV8fflIylNe.js

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="88.221.162.110" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="26624" request="0x96fefa0" url="s-static.ak.facebook.com/.../gVRzyWY7q4L.js

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x93780c0" function="ssl_write" file="ssl.c" line="816" message="SSL_ERROR_SYSCALL: ret=-1 error=Broken pipe"

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x93780c0" function="send_response_body_file" file="response.c" line="673" message="write: Broken pipe"

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="88.221.162.110" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="36864" request="0x93780c0" url="s-static.ak.facebook.com/.../xe9Z9W5RGfP.js

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x95dd8b8" function="ssl_log_errors" file="ssl.c" line="49" message="S 69.63.189.16: 4044639088:error:1409F07F:SSL routines:SSL3_WRITE_PENDING:bad write retry:s3_pkt.c:731:

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x95dd8b8" function="ssl_log_errors" file="ssl.c" line="49" message="S 69.63.189.16: 4044639088:error:1409F07F:SSL routines:SSL3_WRITE_PENDING:bad write retry:s3_pkt.c:731:

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x95dd8b8" function="read_response_body_file_chunked" file="response.c" line="1007" message="recv: Input/output error"

    2011:03:18-21:53:22 *******  httpproxy[13585]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.2.1" dstip="69.63.189.16" user="" statuscode="502" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="4530" request="0x95dd8b8" url="www.facebook.com/

    2011:03:18-21:53:23 *******  httpproxy[13585]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="4467" request="0x9605608" url="passthrough.fw-notify.net/.../default.css" exceptions="" error=""


    TCP Dump attached
    test.zip
  • 0
    Can you please provide a raw dump of the data? The text output of the tcpdump command isn't that helpful. use something like 

    [FONT="Courier New"]tcpdump -n -s0 -w PACKETCAPTUREFILENAME.cap port 80 or port 443[/FONT]



    and send us the .cap file zipped
  • 0
    Can you send me a email address to send you the *.cap file as it's 4.58MB

    As per log I got the input/output error:
    20:05:11
    20:05:23
  • 0
    Email via PM, please don't forget to zip the files ;-)

    Cheers,
    Kai
  • 0
    I have attached another file. It seems that I getting this error message for URL that don't exist (for example : https://www.eicar.org/download/eicar.comzsdfsdfsdfs or https://www.eicar.org/download/eicar.com)

    Thanks
    eicar.zip
Cookie Information Banner