This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Fast Forward Streaming Video

Can't seem to find a solution to this. Some streaming video sites dont allow me to fast forward the video without it erroring out. Only when going through the proxy.

Here's an example

http://players.brightcove.net/16912481001/8cbb3b78-e45b-41d4-9bd2-833d03b506cd_default/index.html?videoId=5088365827001&source=SC-Email-Pros-Release-NA-082516-6dot0-POST&utm_medium=email&utm_source=pros&utm_campaign=release&utm_content=082516&loc=na&sc_camp=67A8DDEF7B93441899172899FA45EEEC&elqTrackId=819c6362a8e64f64b5c64205fad22848&elqTrack=true

Video streams/buffers fine, but if you try to skip ahead it crashes. I've run into this before on other sites, and I'm not seeing anything glaring in the Web filter or ips logs. Any suggestions?



This thread was automatically locked due to age.
Parents
  • Hi,

    Do you mean the fast forwarding works perfectly when the Web Protection is deployed in Transparent mode?

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Standard and transparent exhibit the same issue. Again, it's only some streaming video. Like the example above. Where as youtube works, as well as other sites. 

  • Hi,

    Do you capture anything particular in the HTTP debug logs? 

    To enable HTTP Proxy debug for a single host execute:

    cc -noquote set '"http"' '"debug"' '["all","srcip=<ip address to capture debug info for>"]'
    /var/mdw/scripts/httpproxy restart

    Enter the following to disable debugging:

    cc -noquote set "'http'" "'debug'" '["0"]'
    /var/mdw/scripts/httpproxy restart

    When debugging is disabled, the httpout file will be deleted, so it is important to copy this file to a different location (such as /var/storage) before disabling it to avoid the debug output being lost. To copy the output file, enter the following:

    chmod 777 /var/chroot-http/var/tmp/httpout
    cp /var/storage/httpout

    You can then view the file using vim or copy it to an external destination via a secure FTP client, such as WinSCP.

    NOTE: It is not mandatory to keep the debug logs enable.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • What is it I should be looking for in this log. It's 45mb, so quite a lot of text.

  • Hi,

    Post few lines of the captured log where you find the associated URL for the video streaming. Also, the suggestion provided by Adam cannot be ignored. Configure an exception policy for this.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Reply Children
  • I have definitely attempted the AV exception route already. Here's a snipet from the log I made today (I've only pasted to where the possible error is)

    Doesn't anyone posting on this thread have a UTM? Are you able to start the video, let it play, and then skip ahead?

    2016:09:06-11:09:24 [19989/ 0xf163000] request.c:1620 read_request_headers URL: players.brightcove.net/.../index.html
    2016:09:06-11:09:24 [19989/ (nil)] http_container.c:680 http_container_print [Host]: [players.brightcove.net]
    2016:09:06-11:09:24 [19989/ (nil)] http_container.c:680 http_container_print [Proxy-Connection]: [keep-alive]
    2016:09:06-11:09:24 [19989/ (nil)] http_container.c:680 http_container_print [Upgrade-Insecure-Requests]: [1]
    2016:09:06-11:09:24 [19989/ (nil)] http_container.c:680 http_container_print [User-Agent]: [Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.89 Safari/537.36]
    2016:09:06-11:09:24 [19989/ (nil)] http_container.c:680 http_container_print [Accept]: [text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8]
    2016:09:06-11:09:24 [19989/ (nil)] http_container.c:680 http_container_print [Accept-Encoding]: [gzip, deflate, sdch]
    2016:09:06-11:09:24 [19989/ (nil)] http_container.c:680 http_container_print [Accept-Language]: [en-US,en;q=0.8]
    2016:09:06-11:09:24 [19989/ (nil)] http_container.c:680 http_container_print [If-None-Match]: ["51a6492f6a81022d28b40a6aa60af164"]
    2016:09:06-11:09:24 [19989/ (nil)] http_container.c:680 http_container_print [If-Modified-Since]: [Wed, 31 Aug 2016 21:28:36 GMT]
    2016:09:06-11:09:24 [19989/ 0xf163000] request.c:1641 read_request_headers using keep-alive for client/server connection
    2016:09:06-11:09:24 [19989/ 0xf163000] request.c:1774 read_request_headers using content-length -1
    2016:09:06-11:09:24 [19989/ 0xf163000] auth_endpoint.c:201 auth_endpoint_set_user User not found in auth_endpoint_cache
    2016:09:06-11:09:24 [19989/ 0xf163000] profile.c:434 match_networks matching network ITLPT1 (192.168.50.100 192.168.50.101)
    2016:09:06-11:09:24 [19989/ 0xf163000] profile.c:434 match_networks matching network Ryan_HTC (192.168.50.91 192.168.50.101)
    2016:09:06-11:09:24 [19989/ 0xf163000] profile.c:683 match_exception_service matched any service
    2016:09:06-11:09:24 [19989/ 0xf163000] profile.c:728 match_exception_domainlist exception BrightCove matched domainlist
    2016:09:06-11:09:24 [19989/ 0xf163000] profile.c:837 match_exception_list exception BrightCove applied
    2016:09:06-11:09:24 [19989/ 0xf163000] auth_endpoint.c:201 auth_endpoint_set_user User not found in auth_endpoint_cache
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:1302 epoll_alloc alloc'd 0xe1434a8, refcnt=3
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:940 epoll_add_full adding fd 324, events 4, e 0xe1434a8
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:967 epoll_set_events client, events 0x0000 (ready 0x0005), epolldata=0xe143728, e->fd=319, io_handler=(nil)
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:915 epoll_set_timeout e=0xe1434a8, handler=0x8072760, timeout 5
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:967 epoll_set_events server/other, events 0x0004 (ready 0x0005), epolldata=0xe1434a8, e->fd=324, io_handler=0x80732c0
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:131 epoll_push_to_ready_list pushing 0xe1434a8 to ready list for thread 23
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:67 epoll_signal signaling thread 23
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:627 event_func 23: << done with ioloop
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:502 event_func 23: waiting for epoll events (timeout: 0)
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:514 event_func 23: finished waiting for epoll events: 2
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:519 event_func 23: ctr 1
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:529 event_func 23: e=0xe1434a8, events 0004, fd 324
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:131 epoll_push_to_ready_list pushing 0xe1434a8 to ready list for thread 23
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:568 event_func pop 0xe1434a8
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:122 prepend_to_ready_list 0xe1434a8
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:568 event_func pop 0xe1434a8
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:122 prepend_to_ready_list 0xe1434a8
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:578 event_func 23: >> doing ioloop
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:596 event_func 23: S e=0xe1434a8, io_handler 0x80732c0, (W:0x0004, R:0x0005, onreadylist 1), fd 324
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:599 event_func 23: e=0xe1434a8, calling io_handler 0x80732c0
    2016:09:06-11:09:24 [19989/ 0xf163000] p0f-client.c:227 p0f_send_request called
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:967 epoll_set_events server/other, events 0x0001 (ready 0x0005), epolldata=0xe1434a8, e->fd=324, io_handler=0x8073440
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:131 epoll_push_to_ready_list pushing 0xe1434a8 to ready list for thread 23
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:67 epoll_signal signaling thread 23
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:596 event_func 23: C e=0xe143728, io_handler (nil), (W:0x0000, R:0x0005, onreadylist 1), fd 319
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:605 event_func 23: C e=0xe143728 not ready, removing from list (W:0x0000, R:0x0005, onreadylist 1)
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:627 event_func 23: << done with ioloop
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:502 event_func 23: waiting for epoll events (timeout: 0)
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:514 event_func 23: finished waiting for epoll events: 1
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:519 event_func 23: ctr 1
    2016:09:06-11:09:24 [19989/ (nil)] epoll.c:578 event_func 23: >> doing ioloop
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:596 event_func 23: S e=0xe1434a8, io_handler 0x8073440, (W:0x0001, R:0x0005, onreadylist 1), fd 324
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:599 event_func 23: e=0xe1434a8, calling io_handler 0x8073440
    2016:09:06-11:09:24 [19989/ 0xf163000] p0f-client.c:125 p0f_read_response called
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:1382 epoll_read_until called, e->fd=324
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:1388 epoll_read_until reset buffer
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:1404 epoll_read_until 232 (232) bytes remaining
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:1346 epoll_fill_buffer reset buffer
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:996 plain_raw_read read -1 bytes on fd 324, errno 11
    2016:09:06-11:09:24 [19989/ 0xf163000] epoll.c:1360 epoll_fill_buffer e->raw_read() failed: Resource temporarily unavailable

  • I have the same problem with some video streams. This bug is not fixed.

  • Hi Kubia,

    Can you please post a link to one such video? 

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • I have found adding an exception for antivirus for the url's of the video's work. But thats a pain, and I already have Bypass content scanning for streaming content selected. Although I dont believe that is supposed to bypass AV.