Help - Search - Members
Full Version: kav5.5_squidproxy
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
hreissig
I'm running kav4proxy-5.5-51.i386.rpm under CentOS5 with squid-3.0.STABLE16-1.el5.i386.rpm (ICAP enabled)

By filling some search forms on sites the ICAP Request get declined with error 400 and the following entry in the kav.log:

[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processMsg.Detect stream type: request icap stream
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 parseHReqLine.Parse hreq line: 'REQMOD icap://localhost:1344/av/reqmod ICAP/1.0'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 setIcapReqData.Add ICAP request data, uri:'icap://localhost:1344/av/reqmod' ver:'1.0' method:'REQMOD'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Host: localhost:1344'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Date: Thu, 02 Jul 2009 13:19:25 GMT'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Encapsulated: req-hdr=0, req-body=930'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 EncapsulatedHeaderCallback.Detect encapsulated hdr content: req-hdr=0, req-body=930
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Preview: 0'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Allow: 204'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'X-Client-IP: 192.168.0.200'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 parseHReqLine.Parse hreq line: 'POST http://www.ecv.de/ecv/catalog/pisearch.php HTTP/1.1'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, */*'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Referer: http://www.ecv.de/ecv/catalog/pisearch.php'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Accept-Language: de'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Content-Type: multipart/form-data; boundary=---------------------------7d932b2e800f6'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'UA-CPU: x86'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Accept-Encoding: gzip, deflate'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648)'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Proxy-Connection: Keep-Alive'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Content-Length: 826'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Host: www.ecv.de'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Pragma: no-cache'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 processFieldLine.Parse field: 'Cookie: osCsid=a0aef11cc2077a2f215b66d85d0a99c6; __utma=87978892.1055263347.1246543812.1246543984.1246545933.3; __utmz=87978892.1246543812.1.1.utmccn=(direct)|utmcsr=(direct)|utmcmd=(none); __utmb=87978892; __utmc=87978892'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 chunkedTransferConvertor.!!!Detect last chung but mime processing not complete
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 parse_error.Error during parse message. Error code: '400' MsgID: 'n62FJPx00217879'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 setIcapResData.Add ICAP response data, status:'400' msg:'Bad Request' ver:'1.0'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 analyseInArray.MsgID=n62FJPx00217879 Queue ID=0. IN Message is error.
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 nextBlockOut.Send output message started, url:'http://www.ecv.de/ecv/catalog/pisearch.php'
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 nextBlockOut.MsgID=n62FJPx00217879, Queue ID=0. Send ICAP header complete
[02%.m.2009 15:19:25 D] PROCESS pid = 17879 SID=n62FIDx003 nextBlockOut.MsgID=n62FJPx00217879, Queue ID=0. Send output message without body complete, url:'http://www.ecv.de/ecv/catalog/pisearch.php'

Does anybody has a clue, what the error "chunkedTransferConvertor.!!!Detect last chung but mime processing not complete" means and what to do to fix this situation?

Sincerly yours

Hermann Reissig
phr3n1c
KAV4Proxy does not support CentOS. Perhaps, there's some incompatibility.

Supported operating systems can be found on http://support.kaspersky.com/proxy5.5mp1?level=3
hreissig
QUOTE(phr3n1c @ 2.07.2009 18:13) *
KAV4Proxy does not support CentOS. Perhaps, there's some incompatibility.

Supported operating systems can be found on http://support.kaspersky.com/proxy5.5mp1?level=3


I've found the solution:

The current version kav4proxy-5.5-51 is under this environment somehow buggy. After downgrading to v5.5-41 the ICP-failure disappears.

Sincerly

Hermann
phr3n1c
QUOTE(hreissig @ 2.07.2009 19:25) *
I've found the solution:

The current version kav4proxy-5.5-51 is under this environment somehow buggy. After downgrading to v5.5-41 the ICP-failure disappears.

Thank you very much for providing feedback. smile.gif
Obram
Can somebody post a dowload link for kav4proxy v 5.5.41 ?

We are having the same issue with ICAP error 400 on some pages ... sad.gif
For example posting this via squid+kavproxy5.5.51 gave such error !
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.