[9.060][BUG] HTTP Proxy Broken Pipe And Timeout Errors are back

Hi, first let me say that I find the proxy response a lot better in this version than the 9.0x tree. Having said that, there are certain periods where the proxy stops responding for no apparent reason. So looking at the logs it appears that we had some regression and http://www.astaro.org/closed-forums-read-only/utm-9-betas/utm-9-public-beta-closed/43208-http-proxy-timeout-broken-pipe-consolidation.html problem is back[:(]

gatekeeper:/var/log # grep -c "Broken pipe" /var/log/http.log

112

gatekeeper:/var/log # grep -c Timeout /var/log/http.log

316

Here are a few lines from the http.log also

cat http.log |grep "Broken pipe"

2013:01:24-16:40:00 gatekeeper httpproxy[32708]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.0.11" dstip="173.194.43.37" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x9e71ae0" url="http://i1.ytimg.com/vi/0pcUEKIthoU/default.jpg" exceptions="av" error="Broken pipe" country="United States" category="177" reputation="unverified" categoryname="Content Server" content-type="image/jpeg" application="youtube"
2013:01:24-16:40:00 gatekeeper httpproxy[32708]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9b63860" function="tunnel_response_send_chunk" file="tunnel.c" line="265" message="write: Broken pipe"
2013:01:24-16:40:00 gatekeeper httpproxy[32708]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.0.11" dstip="173.194.43.37" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2586" request="0x9b63860" url="http://i2.ytimg.com/vi/98mCq7CbZvU/mqdefault.jpg" exceptions="av" error="Broken pipe" country="United States" category="177" reputation="unverified" categoryname="Content Server" content-type="image/jpeg" application="youtube"

and the timeouts

2013:01:24-10:21:23 gatekeeper httpproxy[12146]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.0.11" dstip="207.46.125.65" user="" statuscode="504" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2476" request="0x9346510" url="http://by2msg4020818.gateway.messenger.live.com/gateway/gateway.dll?Action=poll&Lifespan=60&SessionID=1046072096.996363977" exceptions="av,content,url,mime,fileextension" error="Timeout while reading response from Server"

All the timeouts are on the same live.com server so the server maybe down.

Regards
Bill

0 Billybob over 12 years ago

Forgot to mention that following the url directly from the logs doesn't produce any errors although the destination server has changed obviously.
For example from the error log above directly accessing the url http://i1.ytimg.com/vi/0pcUEKIthoU/default.jpg doesn't produce any errors
2013:01:24-18:17:06 gatekeeper httpproxy[9755]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="74.125.225.167" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3253" request="0x95fbb20" url="http://i1.ytimg.com/vi/0pcUEKIthoU/default.jpg" exceptions="av" error="" country="United States" category="177" reputation="unverified" categoryname="Content Server" content-type="image/jpeg" application="youtube"

Regards
Bill
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Robert Tausend over 12 years ago

Hi Bill,

seems that i have the same Probs [[:)]] at the moment no one @home is complaining about [[:)]]

firewall:/var/log/http/2013/01 # grep -c "Broken pipe" *
http-2013-01-18.log:0
http-2013-01-19.log:144
http-2013-01-20.log:59
http-2013-01-21.log:0
http-2013-01-22.log:0
http-2013-01-23.log:370
http-2013-01-24.log:142
firewall:/var/log/http/2013/01 # grep -c Timeout *
http-2013-01-18.log:0
http-2013-01-19.log:0
http-2013-01-20.log:5
http-2013-01-21.log:1
http-2013-01-22.log:1
http-2013-01-23.log:1
http-2013-01-24.log:6
firewall:/var/log/http/2013/01 #

Robert
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 bobbylam over 12 years ago

Hi Bill, Robert:

Thanks so much for participating in the beta and bringing this issue to our attention. Apologies for the delay in response, but we're currently trying to re-produce the issue in-house to verify whether this is a bug or not.

I'll keep you posted when we have further information.

Thanks,
Bobby
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Robert Tausend over 12 years ago

No Prob [:)]

robert
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 12 years ago

Thanks for reporting. We are now tracking this as Mantis ID #24072
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 12 years ago

The Mantis ID #24072 is now under investigation.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 12 years ago

The Mantis ID #24072 is now under investigation. We are planning to release a fix for this issue in Version 9.100.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 12 years ago

The Mantis ID #24072 is now being worked on.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 arch113 over 12 years ago in reply to Astaro Beta Bot

I installed 9.1 last night, and I noticed my web browsing slows to a crawl or stops working all together whenever I turn the web proxy on (transparent), when I turn it off, web traffic is just fine (no filtering of course). I will post logs later this evening.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 utm_kid over 12 years ago in reply to arch113

hi ,

This could be this https://community.sophos.com/products/unified-threat-management/astaroorg/f/80/t/64996 problem

do you see any segfault in kernel.log
if you are faceing same problem you can turn off http/s scanning and add pf rule for https browsing

thanks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

[9.060][BUG] HTTP Proxy Broken Pipe And Timeout Errors are back

Submitted a Tech Support Case lately from the Support Portal?