-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I'm not sure now, but it seems that packets routed in Haproxy are
somehow protected from dumping:
root@owncloud:~ # tcpdump -i em1 -vv port 80
tcpdump: listening on em1, link-type EN10MB (Ethernet), capture size
10 bytes
^C
0 packets captured
3774 packets received by filter
0 packets dropped by kernel

I do it directly in the jail and have /dev/bpf enabled.


On 11/25/15 18:03, Lukas Tribus wrote:
>> I'm not sure why, but after doing haproxy -vv I now get kevent()
>> in truss output. I'm attaching another truss output.
> 
> Ok, so thats not the problem, good.
> 
> 
>> While browsing the logs I've notices that besides the usual 200 
>> output, when uploading was finished (unsuccessfully) I got the
>> following 504 code: Nov 24 11:03:13 anongoth haproxy[76436]:
>> 46.248.161.165:23648 [24/Nov/2015:11:02:23.521] https-in~
>> owncloud/node1 54/0/3/-1/50265 504 194 - - sH-- 0/0/0/0/0 0/0
>> "POST /index.php/apps/files/ajax/upload.php HTTP/1.1"
> 
> I think we will have to take a look at the actual backend traffic
> that generates this timeout (according to haproxy the server didn't
> respond in time).
> 
> Can you reproduce this and tcpdump the unencrypted backend traffic
> so that we can take a look (make sure the content can be
> disclosed)?
> 
> In that case please provide the logs again, so we can compare the
> haproxy log and the backend tcp traffic.
> 
> 
> 
> Regards,
> 
> Lukas
> 
> 
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=JAEC
-----END PGP SIGNATURE-----

Reply via email to