[8.160][NOTABUG][CLOSED] HTTP (2nd colon found in domain with no username)

Hi All

When logged in via pptp conection  I am getting "broken pipe errors"

2011:03:05-11:32:33 *******  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xeb5edbb8" function="send_response_body_sendfile" file="response.c" line="559" message="sendfile: fd 5: Broken pipe"

2011:03:05-11:32:44 *******  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1097" message="2nd colon found in domain with no username"
2011:03:05-11:32:37 *******  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xeb5cd5d8" function="send_response_body_sendfile" file="response.c" line="559" message="sendfile: fd 21: Broken pipe"


Thanks
Parents
  • ok you are right! Let me fix the title and provide HTTP logs from that day

    2011:03:05-11:03:48  httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.2.1" dstip="209.20.83.205" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="0" request="0xd4a50b90" url="linkedin2.client.xobni.com/.../Freeware"
    
    2011:03:05-11:03:58 httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.2.1" dstip="209.20.83.205" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="0" request="0xd4a50380" url="linkedin2.client.xobni.com/.../Freeware"
    2011:03:05-11:04:54 httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1097" message="2nd colon found in domain with no username"
    2011:03:05-11:05:26 httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.2" dstip="95.101.82.88" user="" statuscode="200" cached="4" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="8675" request="0xd4a50b90" url="www.ets.org/.../gif"
    2011:03:05-11:05:28  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1097" message="2nd colon found in domain with no username"
    2011:03:05-11:10:51  httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="137.254.16.64" user="" statuscode="302" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="0" request="0xeb5c41f8" url="javadl.sun.com/.../AutoDL
    2011:03:05-11:10:52  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1097" message="2nd colon found in domain with no username"
    2011:03:05-11:11:22  httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="74.125.79.132" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="17685" request="0xeb5edbb8" url="skins.gmodules.com/.../skin_xml_to_css
    2011:03:05-11:11:22  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1097" message="2nd colon found in domain with no username"


    What other logs do you require?
Reply
  • ok you are right! Let me fix the title and provide HTTP logs from that day

    2011:03:05-11:03:48  httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.2.1" dstip="209.20.83.205" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="0" request="0xd4a50b90" url="linkedin2.client.xobni.com/.../Freeware"
    
    2011:03:05-11:03:58 httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.2.1" dstip="209.20.83.205" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="0" request="0xd4a50380" url="linkedin2.client.xobni.com/.../Freeware"
    2011:03:05-11:04:54 httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1097" message="2nd colon found in domain with no username"
    2011:03:05-11:05:26 httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.2" dstip="95.101.82.88" user="" statuscode="200" cached="4" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="8675" request="0xd4a50b90" url="www.ets.org/.../gif"
    2011:03:05-11:05:28  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1097" message="2nd colon found in domain with no username"
    2011:03:05-11:10:51  httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="137.254.16.64" user="" statuscode="302" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="0" request="0xeb5c41f8" url="javadl.sun.com/.../AutoDL
    2011:03:05-11:10:52  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1097" message="2nd colon found in domain with no username"
    2011:03:05-11:11:22  httpproxy[8535]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.1" dstip="74.125.79.132" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="17685" request="0xeb5edbb8" url="skins.gmodules.com/.../skin_xml_to_css
    2011:03:05-11:11:22  httpproxy[8535]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_log" file="scr_scanner.c" line="1097" message="2nd colon found in domain with no username"


    What other logs do you require?
Children
No Data