Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 4139 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Errors in Proxy logs

RobertBradley
After the upgrade to 9.3, not sure exactly which version, but noticed the proxy performance was lagging.  Then when the upgrade to 9.309-3 the proxy was just stop passing traffic and it would have to be manually restarted.  One major issue besides the proxy stopping is that the disk utilization in ATOP is reaching 100% quite often.  Cpu and ram utilization is low.  

Some of the errors are noted below.

sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="95" message="Unable to parse a http message of 9 bytes (HPE_INVALID_METHOD: invalid HTTP method)"
2015:04:02-11:04:23  httpproxy[22402]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="read_request_headers" file="request.c" line="1536" message="unable to parse a http message on handler 2250 (Resource temporarily unavailable)" 
sub="http" request="(nil)" function="plain_write_vector" file="epoll.c" line="1098" message="Write error on the epoll handler 1901 (Broken pipe)"


This thread was automatically locked due to age.
  • 0
    I noticed something similar then, too, although not with those lines in the log.  William reminded me of the old bug that chews up memory when you have single-scan A-V selected anywhere.  I changed ours all to dual-scan and the problems disappeared.  What happens if you do that?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Thanks for the reply, but the RAM usage is low, only disk utilization is maxing out up to 100% at high proxy usage times.

    I have tried the single A/V scan as well as the dual A/V scan(my default) without any change.

    Only thing that helps is to turn off ALL logging on the proxy, which is hard to live without on a firewall.

    Am awaiting a fix from development to clear up the errors in the proxy hopefully today.
Unfiltered HTML