Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 1913 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Google Earth lets Perform CPU on 100%

UweT
Hello,

we have a serious problem in our school:

We have a 6Mbit/s SDSL connection and running an ASG320 v.8.202.

Every time when 20 PCs in a computer lab are using Google Earth all the map data and satellite pictures are being processed by the httpproxy or webfilter service on the Astaro. I can see that using the TOP command on the console. This causes 80% load of this service and 100% load of the CPU in general. 

During that time almost noone of our users of the entire network can browse within the internet. The Astaro is so busy that business doesn't run properly.

We need an urgent help over here and my force is with you.

Update see below: https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/45323

Regards,
Uwe


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to gsxfan
    I did already. But it doesn't work properly.

    If you could tell me the details of this filter? [:$]
  • 0 in reply to UweT
    Hi Uwet,

    I can't give you a specific answer but in cases like this you'd want to add an entry under the Exceptions tab of the webfilter configuration section. 

    What you want to do is find the url's being used by google earth and add those entries into a new exception entry. If you're unsure how to write the url patterns for the filter, feel free to post the urls here and I'd be happy to help you translate them into a pattern the filter can use.
  • 0 in reply to TheDrew
    Hello again!

    I excluded some of Google's subdomains as being found over here:
    Webfilter and Google Earth - General Questions | DSLReports Forums

    But the webfilter log still shows the following when running Google Earth from a client computer:

    2011:12:21-08:28:16 xyzxyz httpproxy[23220]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.17.2.61" dstip="74.125.79.118" user="" statuscode="200" cached="0" profile="REF_KmPBaXPZKV (WLAN-Admin)" filteraction="REF_qpVnLFtQhy (Administration_Action)" size="10396" request="0x7eb94188" url="mw1.google.com/.../023.kmz" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension" error=""
    2011:12:21-08:28:16 xyzxyz httpproxy[23220]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.17.2.61" dstip="74.125.79.93" user="" statuscode="200" cached="0" profile="REF_KmPBaXPZKV (WLAN-Admin)" filteraction="REF_qpVnLFtQhy (Administration_Action)" size="6955" request="0xaa805b8" url="kh.google.com/flatfile
    2011:12:21-08:28:16 xyzxyz httpproxy[23220]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.17.2.61" dstip="74.125.79.118" user="" statuscode="200" cached="0" profile="REF_KmPBaXPZKV (WLAN-Admin)" filteraction="REF_qpVnLFtQhy (Administration_Action)" size="6377" request="0x7eb94020" url="mw1.google.com/.../root.kmz" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension" error=""
    2011:12:21-08:28:16 xyzxyz httpproxy[23220]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.17.2.61" dstip="74.125.79.93" user="" statuscode="200" cached="0" profile="REF_KmPBaXPZKV (WLAN-Admin)" filteraction="REF_qpVnLFtQhy (Administration_Action)" size="17222" request="0x7de23e70" url="kh.google.com/flatfile
    2011:12:21-08:28:16 xyzxyz httpproxy[23220]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.17.2.61" dstip="74.125.79.118" user="" statuscode="200" cached="0" profile="REF_KmPBaXPZKV (WLAN-Admin)" filteraction="REF_qpVnLFtQhy (Administration_Action)" size="1813" request="0x7eb94020" url="mw1.google.com/.../023.kmz" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension" error=""
    2011:12:21-08:28:16 xyzxyz httpproxy[23220]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.17.2.61" dstip="74.125.79.93" user="" statuscode="200" cached="0" profile="REF_KmPBaXPZKV (WLAN-Admin)" filteraction="REF_qpVnLFtQhy (Administration_Action)" size="14267" request="0x7de23e70" url="kh.google.com/flatfile
    2011:12:21-08:28:17 xyzxyz httpproxy[23220]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.17.2.61" dstip="74.125.79.118" user="" statuscode="200" cached="0" profile="REF_KmPBaXPZKV (WLAN-Admin)" filteraction="REF_qpVnLFtQhy (Administration_Action)" size="17086" request="0x7eb94188" url="mw1.google.com/.../023.kmz" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension" error=""
    2011:12:21-08:28:17 xyzxyz httpproxy[23220]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.17.2.61" dstip="74.125.79.118" user="" statuscode="200" cached="0" profile="REF_KmPBaXPZKV (WLAN-Admin)" filteraction="REF_qpVnLFtQhy (Administration_Action)" size="478990" request="0x98bc028" url="mw1.google.com/.../023.kmz" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension" error=""
    2011:12:21-08:28:18 xyzxyz httpproxy[23220]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.17.2.61" dstip="74.125.79.118" user="" statuscode="200" cached="0" profile="REF_KmPBaXPZKV (WLAN-Admin)" filteraction="REF_qpVnLFtQhy (Administration_Action)" size="384" request="0x7eb949f8" url="mw1.google.com/.../023.kmz" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension" error=""


    When being excluded should the URLs still appear in the webfilter log?
    I am asking because that still causes CPU overload on the Astaro! (ouch)

    * * *

    Update:
    I even excluded logging of these URLs. Now I don't see it in the web filter log any longer but the CPU still performs on peak level.