This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Service definition missing from WebAdmin

I'm seeing a fair amouont of traffic outbound using the HTTP-ALT service in Reporting>Network Usage>Accounting. Looking in Definitions>Services, I don't see this service listed. What's the definition for this service? 1:65535 --> ? TCP/UDP?

Also, which log can I check its' usage in? I don't see anything in either the packet filter or the content filter (HTTP).

This thread was automatically locked due to age.

Parents

0 BAlfson over 16 years ago

TCP 8080

You should be able to click on that and get the clients using it identified.

Cheers - Bob
PS I just tried that and found that it was blank, but when I manually entered 8080 in 'Protocol/Port', I got the information. I went back and added a service definition for 'HTTP-ALT', but that made no difference.

> > > > > > > BUG! <><><><><><>

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 16 years ago in reply to BAlfson

Thanks. 8080 is listed in Service Definitions as HTTP Proxy. A bit of googleing showed 8000 and 8008 also commonly used under the HTTP-ALT name, leading to my confusion. I'm wondering if Astaro picks up these ports as well in this hidden definition.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Scott_Klassen over 16 years ago in reply to BAlfson

Thanks. 8080 is listed in Service Definitions as HTTP Proxy. A bit of googleing showed 8000 and 8008 also commonly used under the HTTP-ALT name, leading to my confusion. I'm wondering if Astaro picks up these ports as well in this hidden definition.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BAlfson over 16 years ago in reply to Scott_Klassen

Dunno. From what I understand, 8080 is the "classic" assignment.

When you look at the accounting for those other two ports, does it appear that they are added to the traffic for 8080 to come up to the total for HTTP-ALT?

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 16 years ago in reply to BAlfson

Well, neither of them are listed in accounting as being a top service for this client system. Then again, 8080/Web Proxy doesn't show either, since I'm using transparent mode for HTTP filtering. I still can't find and of this traffic in the logs though I know it's from various internet radio streams.

I might just give Astaro support a quick buzz about all of this tomorrow and see what they say.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to Scott_Klassen

Please post the result.

Thanks - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 16 years ago in reply to BAlfson

Will do. Maybe I'll get lucky and Gert or one of the other Astaro folks will see this thread and reply tonight. [:)]

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 16 years ago in reply to Scott_Klassen

I heard back from Astaro Support.

"[FONT=Consolas][SIZE=3]Actually HTTP-ALT service in the report is the proxy port, 8080. The service definition list is not used in the network reports to resolve network ports."[/SIZE][/FONT]
[FONT=Consolas][SIZE=3][/SIZE][/FONT]
[FONT=Consolas][SIZE=3]I've created a packet filter rule which drops any outbound HTTP Proxy traffic. We'll have to wait and see if anything breaks.[/SIZE][/FONT]

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel