Ive working on an HTTP-Proxy which is causing problems when its in use.
heres stdout of whats not working:
listening on localhost:1024 for forwards to * ... do the loop
(this chunk repeats 10 times)
extracted method:<CONNECT> path:<www.openssl.org:443> from: <CONNECT www.openssl.org:443 H>TP/1.1
www.openssl.org:443
found <www.openssl.org:443> in CONNECT msg
Web request: to www.openssl.org on 443 for <> type:
server Interrupted, closing server ENDing
So, since Im on Linux, I setup a couple iptables filters to log the 443 traffic,
then took a a baseline,
grep 443 /var/log/messages > baseline
then ran an https://openssl.org/, snapped a new grep, changed browser to proxy thru localhost:1024, and repeated browse.
after diffing out baseline and 2nd (successful) GET, I get 2 files:
the failing - proxy one, with 77 lines, shows the repeat (11 times, not 10), like this.
SRC=10.0.0.7 DST=195.27.176.155 LEN=60 SYN SRC=195.27.176.155 DST=10.0.0.7 LEN=60 ACK SYN SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=221 ACK PSH SRC=195.27.176.155 DST=10.0.0.7 LEN=52 ACK FIN SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK FIN
the good (direct) pull looks like this.
SRC=10.0.0.7 DST=195.27.176.155 LEN=60 SYN SRC=195.27.176.155 DST=10.0.0.7 LEN=60 ACK SYN SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=157 ACK PSH SRC=195.27.176.155 DST=10.0.0.7 LEN=1324 ACK PSH SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=250 ACK PSH SRC=195.27.176.155 DST=10.0.0.7 LEN=111 ACK PSH SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=505 ACK PSH SRC=195.27.176.155 DST=10.0.0.7 LEN=361 ACK PSH SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=833 ACK PSH SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=489 ACK PSH SRC=10.0.0.7 DST=195.27.176.155 LEN=60 SYN SRC=195.27.176.155 DST=10.0.0.7 LEN=60 ACK SYN SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=172 ACK PSH SRC=195.27.176.155 DST=10.0.0.7 LEN=1500 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=195.27.176.155 DST=10.0.0.7 LEN=1473 ACK PSH SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=489 ACK PSH SRC=195.27.176.155 DST=10.0.0.7 LEN=190 ACK PSH SRC=10.0.0.7 DST=195.27.176.155 LEN=52 ACK SRC=10.0.0.7 DST=195.27.176.155 LEN=548 ACK PSH SRC=195.27.176.155 DST=10.0.0.7 LEN=905 ACK PSH SRC=10.0.0.7 DST=195.27.176.155 LEN=489 ACK PSH ... total 117 lines
I can see that 1st 3 messages from 2 sessions seem to match, in flags, length.
at 4th message, sessions deviate
From this, can anyone provide some insight into whats going wrong ? WAGs welcome.
tia jimc
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
