[9.000][OPEN] Truncated downloads when Session exceeded configured max bytes to queue

Hello,
Bob suggested me to report this behaviour in v9 beta forum.

I noticed that some files (tipically large files) were not completely downloaded.

In these cases IPS log file contains lines like this:

FIREWALL snort[7480]: S5: Session exceeded configured max bytes to queue 1048576 using 1049776 bytes (client queue). MY_PUBLIC_IP 32771 --> 95.101.34.58 80 : LWstate 0x9 LWFlags 0x6007

After the support changed the buffer size of IPS, the issue disappeared.

bye
eclipse79

Parents

0 kbr over 12 years ago

That sounds interesting... Do you have the proxy enabled, and if yes, is it standard or transparent mode?

Cheers,
Kai
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 kbr over 12 years ago

That sounds interesting... Do you have the proxy enabled, and if yes, is it standard or transparent mode?

Cheers,
Kai
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 eclipse79oldacct over 12 years ago in reply to kbr

That sounds interesting... Do you have the proxy enabled, and if yes, is it standard or transparent mode?

Cheers,
Kai

Yes Kai, I have the proxy enabled in standard mode. But the more interesting thing is that IPS broke also a download from an interface that isn't protected by IPS. Read this post for more details: http://www.astaro.org/astaro-gateway-products/network-security-firewall-nat-qos-ips/43465-ips-log-files-contains-data-related-non-protected-interfaces.html

Tell me if you need other informations

bye
eclipse79

EDIT: ips truncated the download from a non protected interface that does not have a web proxy at all. I have a "Wi-Fi emergency interface" that I use when I need to fastly get a page/file that my ASG blocks, so it does not have any protection.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

[9.000][OPEN] Truncated downloads when Session exceeded configured max bytes to queue

Submitted a Tech Support Case lately from the Support Portal?