Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 2 replies
  • Subscribers 0 subscribers
  • Views 1338 views
  • Users 0 members are here
Options
Suggested

[9.305-4][BUG] Webfilter error with stream

scorpionking
When trying to watch the video stream from Das besondere Café - Regio TV Schwaben I get the error "Unable to parse a http message of 1 bytes (HPE_INVALID_CONSTANT: invalid constant string)" in the webfilter log:
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.84" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="22586" request="0xc3f7e800" url="stats.telvi.de/.../javascript"
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.84" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="43" request="0xc3f7e800" url="stats.telvi.de/piwik.php
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="199.96.57.8" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="112" request="0xc3c5d000" url="cdn.syndication.twitter.com/.../count.json
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.133" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="376994" request="0xc3d0f000" url="global.telvi.de/.../x-shockwave-flash"
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.111" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="155" request="0xf338000" url="images.telvi.de/.../xml"
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.80" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="255" request="0xc3c5d000" url="video.telvi.de/.../xml"
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.181" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="193" request="0xc3d0f000" url="v.telvi.de/.../xml"
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.30" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="151" request="0xe1c1800" url="admin.telvi.de/.../xml"
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.30" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="155" request="0xc3f7e800" url="audio.telvi.de/.../xml"
2015:01:01-18:35:40 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.111" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="149" request="0xc3f7e000" url="www.telvi.de/.../xml"
2015:01:01-18:35:41 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.0.10" dstip="82.140.15.181" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="4925" request="0xc3d0f000" url="v.telvi.de/
2015:01:01-18:35:41 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.0.10" dstip="82.140.15.181" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProInternalde (Internal_Default)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="1172" request="0xc3d0f000" url="v.telvi.de/.../xml"
2015:01:01-18:35:41 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.0.10" dstip="82.140.15.22" user="" ad_domain="" statuscode="404" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="0" request="0xe9b8000" url="stream.telvi.de/.../ident2" referer="" error="" authtime="0" dnstime="41" cattime="70" avscantime="427" fullreqtime="76151" device="0" auth="0" ua="Shockwave Flash" exceptions="av,url,ssl,cache"
2015:01:01-18:35:41 vpn-1 httpproxy[6233]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="95" message="Unable to parse a http message of 1 bytes (HPE_INVALID_CONSTANT: invalid constant string)"
2015:01:01-18:35:41 vpn-1 httpproxy[6233]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe9b8000" function="read_response_headers" file="response.c" line="212" message="unable to parse a http message on handler 159"
2015:01:01-18:35:41 vpn-1 httpproxy[6233]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.0.10" dstip="82.140.15.22" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_HttCffInterConteFilte (Internal content filter action)" size="1" request="0xe9b8000" url="stream.telvi.de/.../1" referer="" error="" authtime="0" dnstime="0" cattime="95" avscantime="453" fullreqtime="37833" device="0" auth="0" ua="Shockwave Flash" exceptions="av,url,ssl,cache"


The stream does not play.

Webfilter in standard mode with SSL scanning enabled.
But also happens with transparent mode.
Unfiltered HTML