-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I'm not sure now, but it seems that packets routed in Haproxy are somehow protected from dumping: root@owncloud:~ # tcpdump -i em1 -vv port 80 tcpdump: listening on em1, link-type EN10MB (Ethernet), capture size 10 bytes ^C 0 packets captured 3774 packets received by filter 0 packets dropped by kernel
I do it directly in the jail and have /dev/bpf enabled. On 11/25/15 18:03, Lukas Tribus wrote: >> I'm not sure why, but after doing haproxy -vv I now get kevent() >> in truss output. I'm attaching another truss output. > > Ok, so thats not the problem, good. > > >> While browsing the logs I've notices that besides the usual 200 >> output, when uploading was finished (unsuccessfully) I got the >> following 504 code: Nov 24 11:03:13 anongoth haproxy[76436]: >> 46.248.161.165:23648 [24/Nov/2015:11:02:23.521] https-in~ >> owncloud/node1 54/0/3/-1/50265 504 194 - - sH-- 0/0/0/0/0 0/0 >> "POST /index.php/apps/files/ajax/upload.php HTTP/1.1" > > I think we will have to take a look at the actual backend traffic > that generates this timeout (according to haproxy the server didn't > respond in time). > > Can you reproduce this and tcpdump the unencrypted backend traffic > so that we can take a look (make sure the content can be > disclosed)? > > In that case please provide the logs again, so we can compare the > haproxy log and the backend tcp traffic. > > > > Regards, > > Lukas > > > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWVvQ7AAoJEC9nKukRsfY+OrwQAIGMAlSZtCHhTLu3gElzA1sG Q7CMXydW+XSh9Y2mF2F7zS1LKTT2vow8FsXYvVDl2IKEaxgUbh1abVbbOcoSpPsy fOx/x7OGzBDgvz6JdfPwpcBioFtqXFxbvtYgSdjYSUjDCnJAxyB4EGkx+aiM3Ysu TWLWmIbwguHExgsj9AsczBEzBwbX1NuvsTH3wffeYFYkDZZeCzlBL0ewLJdL58JQ pTgYWTFy00oz7Vjv42BeTuYiba37sndNV1tS+xOwNjY78aMCK1hvgsGPyCO3nKjz YJ+UEW7NPH6NRI5Z3guTi5yoJ/6Gx36ZM+pA/dZ3LC7SLWlStGMJt7MbPKZ9EZGV cx6W2ZK+Sz/Arj2cvNpCgIrcUDWvoteJ8ym//Z7ag2KkA7iXV+idGThyHV6UNrFZ IsRJrcVhNaN/iYB1m4IteuTAOMVb8AxtdhYBZlI78wgQSwBYdT6x5QiP6RsMjvzb CYPbd2aeZLfvjLKNLCa3Qsp2zkMZlbPFBAuh0RzQEAwazOmMV+V59xW/ikDsX7Be w5oIy0n0aZW352XBDGCNM79MrY6nJs9JhJOoySbl391mJcYU+xJdF0CNy+DVRLyH RPKAnXyg/t92DdZ1DetHWGH/V+BVdTU4I9Ejv+ObKiuzbVLksv7tQz7Kvji10Xzo JtMeRfEiVWfIb9YEos+2 =JAEC -----END PGP SIGNATURE-----
