Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 24 replies
  • Subscribers 0 subscribers
  • Views 16385 views
  • Users 0 members are here
Options
Suggested

[9.100][BUG] Http reading configuration

Siarom
The message occurs intermittently and access are left without access. 

Poxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="241" message="reading configuration"

2013:04:26-10:07:53 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="568" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"

2013:04:26-10:07:53 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="2770" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"

2013:04:26-10:07:53 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="261" message="reading profiles"

2013:04:26-10:07:55 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_zap" file="diskcache.c" line="445" message="creating cache"

2013:04:26-10:07:56 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs01.astaro.com' access time: 499ms"

2013:04:26-10:07:56 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs02.astaro.com' access time: 405ms"

2013:04:26-10:07:56 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs03.astaro.com' access time: 312ms"

2013:04:26-10:07:57 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs04.astaro.com' access time: 371ms"

2013:04:26-10:07:57 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs05.astaro.com' access time: 480ms"

2013:04:26-10:07:58 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs06.astaro.com' access time: 317ms"

2013:04:26-10:07:58 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs07.astaro.com' access time: 287ms"

2013:04:26-10:07:58 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs08.astaro.com' access time: 544ms"

2013:04:26-10:07:59 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs09.astaro.com' access time: 687ms"

2013:04:26-10:08:00 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs10.astaro.com' access time: 706ms"

2013:04:26-10:08:00 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs11.astaro.com' access time: 477ms"

2013:04:26-10:08:01 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs12.astaro.com' access time: 373ms"

2013:04:26-10:08:01 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs13.astaro.com' access time: 387ms"

2013:04:26-10:08:01 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs14.astaro.com' access time: 308ms"

2013:04:26-10:08:02 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="saviscanner.c" line="223" message="Successfully loaded SAVI threat data, engine 3.41.0, threat data 4.87 from 13/3/2013 (4726367 detected threats)"

2013:04:26-10:08:02 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="305" message="finished startup"

2013:04:26-10:08:02 secg97 httpproxy[7388]: Integrated HTTP-Proxy (c) 2007-2013 Astaro GmbH & Co. KG, Release 18.g8a6c66d

2013:04:26-10:08:02 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs15.astaro.com' access time: 720ms"

2013:04:26-10:08:03 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="754" message="server 'cffs16.astaro.com' access time: 535ms"

2013:04:26-10:08:03 secg97 httpproxy[7388]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x16b980d8" function="is_server_certificate_valid" file="ssl.c" line="683" message="Unable to get peer certificate"
Parents
  • 0
    Hi Siarom,

    There is nothing in the log you posted that shows an error.  Those are all standard messages that are printed whenever the proxy starts up.

    All the cffsxx checks are the proxy looking for the closest/fastest categorization lookup server, which is does at startup and again periodically.

    If you exclude those it starts at reading configuration, and 9 seconds later you see the "Integrated HTTP-Proxy" message which is when the proxy can start processing requests.

    The proxy needs to restart to handle some types of configuration changes.  If you think the proxy is restarting when it shouldn't, we need more logs.
    What occurs before the "reading configuration" line?
    Is there anything in the Kernel Message log at the same time?
    Are there any files in /var/storage/cores/ ?
Reply
  • 0
    Hi Siarom,

    There is nothing in the log you posted that shows an error.  Those are all standard messages that are printed whenever the proxy starts up.

    All the cffsxx checks are the proxy looking for the closest/fastest categorization lookup server, which is does at startup and again periodically.

    If you exclude those it starts at reading configuration, and 9 seconds later you see the "Integrated HTTP-Proxy" message which is when the proxy can start processing requests.

    The proxy needs to restart to handle some types of configuration changes.  If you think the proxy is restarting when it shouldn't, we need more logs.
    What occurs before the "reading configuration" line?
    Is there anything in the Kernel Message log at the same time?
    Are there any files in /var/storage/cores/ ?
Children
No Data
Unfiltered HTML