ā01-30-2012 11:28 AM
Hello folks, we are currently having an issue where uploads to YouTube are recently failing. Logs errors below. I have tried every exception method I know to get past but still a problem. Has anyone recently encountered this? Is a non existant page really killing an upload? Thank you for any ideas you have. jc
1327945268.803 423 10.180.6.125 TCP_MISS/404 12253 GET
"KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",231.74,0,-,"-","-"> - "30/Jan/2012:11:41:08 -0600"
1327945271.761 362 10.180.6.125 TCP_MISS/404 12253 GET
"KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",270.78,0,-,"-","-"> - "30/Jan/2012:11:41:11 -0600"
1327945274.748 352 10.180.6.125 TCP_MISS/404 12253 GET
"KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",278.48,0,-,"-","-"> - "30/Jan/2012:11:41:14 -0600"
1327945277.702 294 10.180.6.125 TCP_MISS/404 12253 GET
"KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",333.41,0,-,"-","-"> - "30/Jan/2012:11:41:17 -0600"
1327945281.002 585 10.180.6.125 TCP_MISS/404 12253 GET
"KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",167.56,0,-,"-","-"> - "30/Jan/2012:11:41:21 -0600"
1327945283.833 406 10.180.6.125 TCP_MISS/404 12253 GET
"KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",241.44,0,-,"-","-"> - "30/Jan/2012:11:41:23 -0600"
1327945286.709 272 10.180.6.125 TCP_MISS/404 12253 GET
"KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",360.38,0,-,"-","-"> - "30/Jan/2012:11:41:26 -0600"
1327945289.812 341 10.180.6.125 TCP_MISS/404 12253 GET
http://www.youtube.com/api/upload_feedback?id=AEnB2UoLTTjoyKryJ6V1JGh_uuv1IJVXY2Ao7q_7npdpmljwcsDfjbQ59e_aJ5ZxjlppPE8ZIrFMC1gDF_8sD55noFmyQty1eg&type=video_id "KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",287.46,0,-,"-","-"> - "30/Jan/2012:11:41:29 -0600"
1327945268.803 423 10.180.6.125 TCP_MISS/404 12253 GET
http://www.youtube.com/api/upload_feedback?id=AEnB2UoLTTjoyKryJ6V1JGh_uuv1IJVXY2Ao7q_7npdpmljwcsDfjbQ59e_aJ5ZxjlppPE8ZIrFMC1gDF_8sD55noFmyQty1eg&type=video_id "KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",231.74,0,-,"-","-"> - "30/Jan/2012:11:41:08 -0600"
1327945271.761 362 10.180.6.125 TCP_MISS/404 12253 GET
http://www.youtube.com/api/upload_feedback?id=AEnB2UoLTTjoyKryJ6V1JGh_uuv1IJVXY2Ao7q_7npdpmljwcsDfjbQ59e_aJ5ZxjlppPE8ZIrFMC1gDF_8sD55noFmyQty1eg&type=video_id "KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",270.78,0,-,"-","-"> - "30/Jan/2012:11:41:11 -0600"
1327945274.748 352 10.180.6.125 TCP_MISS/404 12253 GET
http://www.youtube.com/api/upload_feedback?id=AEnB2UoLTTjoyKryJ6V1JGh_uuv1IJVXY2Ao7q_7npdpmljwcsDfjbQ59e_aJ5ZxjlppPE8ZIrFMC1gDF_8sD55noFmyQty1eg&type=video_id "KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",278.48,0,-,"-","-"> - "30/Jan/2012:11:41:14 -0600"
1327945277.702 294 10.180.6.125 TCP_MISS/404 12253 GET
http://www.youtube.com/api/upload_feedback?id=AEnB2UoLTTjoyKryJ6V1JGh_uuv1IJVXY2Ao7q_7npdpmljwcsDfjbQ59e_aJ5ZxjlppPE8ZIrFMC1gDF_8sD55noFmyQty1eg&type=video_id "KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",333.41,0,-,"-","-"> - "30/Jan/2012:11:41:17 -0600"
1327945281.002 585 10.180.6.125 TCP_MISS/404 12253 GET
http://www.youtube.com/api/upload_feedback?id=AEnB2UoLTTjoyKryJ6V1JGh_uuv1IJVXY2Ao7q_7npdpmljwcsDfjbQ59e_aJ5ZxjlppPE8ZIrFMC1gDF_8sD55noFmyQty1eg&type=video_id "KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",167.56,0,-,"-","-"> - "30/Jan/2012:11:41:21 -0600"
1327945283.833 406 10.180.6.125 TCP_MISS/404 12253 GET
http://www.youtube.com/api/upload_feedback?id=AEnB2UoLTTjoyKryJ6V1JGh_uuv1IJVXY2Ao7q_7npdpmljwcsDfjbQ59e_aJ5ZxjlppPE8ZIrFMC1gDF_8sD55noFmyQty1eg&type=video_id "KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",241.44,0,-,"-","-"> - "30/Jan/2012:11:41:23 -0600"
1327945286.709 272 10.180.6.125 TCP_MISS/404 12253 GET
http://www.youtube.com/api/upload_feedback?id=AEnB2UoLTTjoyKryJ6V1JGh_uuv1IJVXY2Ao7q_7npdpmljwcsDfjbQ59e_aJ5ZxjlppPE8ZIrFMC1gDF_8sD55noFmyQty1eg&type=video_id "KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",360.38,0,-,"-","-"> - "30/Jan/2012:11:41:26 -0600"
1327945289.812 341 10.180.6.125 TCP_MISS/404 12253 GET
http://www.youtube.com/api/upload_feedback?id=AEnB2UoLTTjoyKryJ6V1JGh_uuv1IJVXY2Ao7q_7npdpmljwcsDfjbQ59e_aJ5ZxjlppPE8ZIrFMC1gDF_8sD55noFmyQty1eg&type=video_id "KUHA\jcunning@KUHArealm" DIRECT/www.youtube.com text/html ALLOW_CUSTOMCAT_11-ADgroupMonitorOnly-DefaultGroup-DefaultGroup-NONE-NONE-DefaultGroup <C_Man0,-,"-","-",-,-,-,"-","-",-,-,-,"-","-",-,"-","-",-,-,-,-,"-","-","-","-","-","-",287.46,0,-,"-","-"> - "30/Jan/2012:11:41:29 -0600"
ā01-31-2012 04:56 PM
Hi John,
I would reproduce this issue with youtube while running a packet capture on the WSA. See instructions below.
You will need to log into the GUI ->Support and Help -> Packet Capture -> Edit Settings -> Select the radial button No Filter.
Once you have the capture you will then you will want to use the filter in wireshark :
http.response.code == 404
Once you have applied the filter in wireshark right mouse click any of the 404 messages to follow the stream to determine who is sending it. Pay close attention to your MAC address in your packet capture as the WSA will present itself as the destination URL to the client PC. What your looking for is who sends the 404 to who in order to understand where it is originating. Once you have this information if you would like you may report it with in this thread.
Also if you do not fell comfortable with doing this please open up a support ticket.
If you have any questions or concerns please feel free to email or call me. Kind regards,
Erik Kaiser 650.243.6430 Hours 8:00 am - 5:00 pm PST Customer Support Engineer Cisco IronPort Customer Support Support Portal: http://www.cisco.com/web/ironport/index.html Toll-Free Customer Support United States: 1-877-641-IRON (4766) International: http://www.cisco.com/web/ironport/contacts.html
ā02-03-2012 02:17 PM
We are also having the same identical issue with the S160.
ā02-10-2012 09:04 AM
Hi Pat,
If you would provide a simultaneous packet capture from the client pc and WSA that would help us determine what the issue is. In order to obtain a simultaneous packet capture from the WSA & PC you will need to log into the GUI ->Support and Help -> Packet Capture -> Edit Settings -> Select the radial button No Filter.
Once you have this reply back and I will walk you through determining how to determin what is causing the issue.
Erik
ā02-15-2012 03:42 AM
Interesting posting. Is there a guide to how to read the debug output? We have problems uploading a document to a site and this is the debug;
1329300962.056 268 172.17.21.198 TCP_MISS_SSL/200 2746 GET
https://invoice.sfso.no:443/Invoice/Admin/AdminUploadWarrant_Root.asp
- DIRECT/159.216.119.21 text/html DEFAULT_CASE_11-DSBaccess-DSBHK-NONE-NONE-NONE-NONE
1329300962.365 295 172.17.21.198 TCP_MISS_SSL/200 1384 GET
https://invoice.sfso.no:443/Invoice/Admin/AdminUploadWarrant_Menu.asp?Type=Edit
- DIRECT/159.216.119.21 text/html DEFAULT_CASE_11-DSBaccess-DSBHK-NONE-NONE-NONE-NONE
1329301010.191 550 172.17.21.198 NONE_SSL/504 1761 POST
https://invoice.sfso.no:443/Invoice/Admin/AdminUploadWarrant_progress_upload.asp - DIRECT/159.216.119.21 - OTHER-NONE-DSBHK-NONE-DefaultGroup-NONE-NONE
1329300962.056 268 172.17.21.198 TCP_MISS_SSL/200 2746 GET
https://invoice.sfso.no:443/Invoice/Admin/AdminUploadWarrant_Root.asp - DIRECT/159.216.119.21 text/html DEFAULT_CASE_11-DSBaccess-DSBHK-NONE-NONE-NONE-NONE
1329300962.365 295 172.17.21.198 TCP_MISS_SSL/200 1384 GET
https://invoice.sfso.no:443/Invoice/Admin/AdminUploadWarrant_Menu.asp?Type=Edit - DIRECT/159.216.119.21 text/html DEFAULT_CASE_11-DSBaccess-DSBHK-NONE-NONE-NONE-NONE
1329301010.191 550 172.17.21.198 NONE_SSL/504 1761 POST
https://invoice.sfso.no:443/Invoice/Admin/AdminUploadWarrant_progress_upload.asp - DIRECT/159.216.119.21 - OTHER-NONE-DSBHK-NONE-DefaultGroup-NONE-NONE
Are there any documents explaining how to interpret this output? The suggestion from Erik Kaiser is interesting and I will try that, but I would also like to be able to understand the debug output a little better.
ā02-15-2012 07:01 AM
Yes there is. Log into the GUI of the WSA -> Support and Help -> Online Help -> Click on the search tab -> enter access logs. On the left an index should be displayed and it should be page 72. This will actually provide an example as well as a chart explaining each filed in detail. The fields that you want to look at in order to understand what is happening to the traffic are :
NONE_SSL/504 1761 POST
NONE_SSL is known as an HTTPS transaction result code this is very important. It can list many different codes.
/504 is the HTTP code. A 504 is a gateway timeout. This is only taking place when you try to POST or upload a file.
A packet capture is necessary in order to determine if it trully is a gateway timeout or if somehting else on the network is tearing down the communication such as the L4 traffic monitor or an ASA IPS.
ā02-15-2012 07:21 AM
ā02-15-2012 07:11 AM
Erik, I opened a support case before I posted here and have been working with the engineer. We essentially did as you asked and they are evaluating the results. Case # 620491639
ā08-14-2014 02:32 PM
So.......what happened? Did you get it resolved??
Isn't it great when you have the same problem and when you find one of these the ending results are never posted?!
ā08-14-2014 08:22 PM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: