Download stalled

Jan 09 07 7:40 am

Hi,

I have a reproducable download problem (HTTP or SOCKS). The file start downloading and after approx 5-20k it stops.

The file is http://bike-gps.idrz.de/updates/trup3_1.exe

can somebody please verify this? At the moment this seems the only server where I can reproduce this.

used version wingate 6.2 + Kasperky Antivir 2.0

here the logs
HTTP:
01/08/07 19:21:22 192.168.0.10 Guest 0000000028 Requested: http://bike-gps.idrz.de/updates/trup3_1.exe
01/08/07 19:21:22 192.168.0.10 Guest 0000000028 Debug: [bike-gps.idrz.de/updates/trup3_1.exe] Copy to use: SERVER
01/08/07 19:21:22 192.168.0.10 Guest 0000000028 Debug: WWW Session sending server request in thread 3384
01/08/07 19:21:22 192.168.0.10 Guest 0000000028 Debug: WWW Session processing HTTP response in thread 3384 - response code 200
01/08/07 19:21:22 192.168.0.10 Guest 0000000028 Debug: Drip-feeding resource to client
01/08/07 19:22:01 192.168.0.10 Guest 0000000026 Traffic 0 0 0 0 61s
01/08/07 19:23:48 192.168.0.10 Guest 0000000028 Traffic 15523 687 626 20600 146s

SOCKS:
01/08/07 19:29:35 192.168.0.10 Guest 0000000041 Requested: SOCKS4 Connect 82.135.114.95:80
01/08/07 19:35:32 192.168.0.10 Guest 0000000041 Traffic 23512 678 658 23504 357s

direct internet works well (without proxy).

Jan 10 07 4:40 pm

tried through a couple of servers here, and it works fine for me.

Could it be cached?

Adrien

Jan 10 07 8:06 pm

adrien wrote:tried through a couple of servers here, and it works fine for me.

Could it be cached?

Adrien

The cache rules tell me only active for jpg and gifs...

I also deleted the cache dir and history.. manually - did not help. Disabling antivirus for the users also did not help. I also can do an ethereal if you need it?... or anything that helps to analyse what the problem is (maybe also my local config...).

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache]
"AutoPurge"=dword:00000001
"CacheDirectory"="cache"
"CacheOptions"=dword:00000003
"CacheSelection"=dword:00000000
"DaysBeforeCheckNonVolatile"=dword:00000001
"DaysBeforeCheckVolatile"=dword:00000000
"LimitCacheSize"=dword:00000001
"MaxSize"=dword:00000096
"SpecifyWhatToCache"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\CacheFilter]

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\CacheFilter\Filter0]
"Name"="JPG"
"Description"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\CacheFilter\Filter0\Criterion0]
"Name"=""
"Description"="HTTP URL ends with ".jpg""
"Type"="CRequestCriterion"
"Comparison"=dword:00000005
"DataIndex"=dword:0000000f
"VariableName"="ends with"
"Not"=dword:00000000
"DataType"=dword:00000002
"dwData"=dword:00000000
"nData"=dword:00000000
"dData"=hex:00,00,00,00,00,00,00,00
"strData"=".jpg"

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\CacheFilter\Filter1]
"Name"="GIF"
"Description"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\CacheFilter\Filter1\Criterion0]
"Name"=""
"Description"="HTTP URL ends with ".gif""
"Type"="CRequestCriterion"
"Comparison"=dword:00000005
"DataIndex"=dword:0000000f
"VariableName"="ends with"
"Not"=dword:00000000
"DataType"=dword:00000002
"dwData"=dword:00000000
"nData"=dword:00000000
"dData"=hex:00,00,00,00,00,00,00,00
"strData"=".gif"

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\PurgeFilter]

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\PurgeFilter\Filter0]
"Name"="Large files"
"Description"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\PurgeFilter\Filter0\Criterion0]
"Name"=""
"Description"="Cachefile size (bytes) greater than 500000"
"Type"="CCachePurgeCriterion"
"Comparison"=dword:00000001
"DataIndex"=dword:00000002
"VariableName"="greater than"
"Not"=dword:00000000
"DataType"=dword:00000001
"dwData"=dword:0007a120
"nData"=dword:00000000
"dData"=hex:00,00,00,00,00,00,00,00
"strData"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\PurgeFilter\Filter1]
"Name"="Unused cache files"
"Description"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\PurgeFilter\Filter1\Criterion0]
"Name"=""
"Description"="Hit count less than 1"
"Type"="CCachePurgeCriterion"
"Comparison"=dword:00000002
"DataIndex"=dword:00000004
"VariableName"=""
"Not"=dword:00000000
"DataType"=dword:00000001
"dwData"=dword:00000001
"nData"=dword:00000000
"dData"=hex:00,00,00,00,00,00,00,00
"strData"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\PurgeFilter\Filter2]
"Name"="0 Byte Files"
"Description"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Cache\PurgeFilter\Filter2\Criterion0]
"Name"=""
"Description"="Cachefile size (bytes) equals 0"
"Type"="CCachePurgeCriterion"
"Comparison"=dword:00000000
"DataIndex"=dword:00000002
"VariableName"="equals"
"Not"=dword:00000000
"DataType"=dword:00000001
"dwData"=dword:00000000
"nData"=dword:00000000
"dData"=hex:00,00,00,00,00,00,00,00
"strData"=""

Jan 11 07 12:07 am

hi Olaf

Sorry, I meant could it be cached in the actual browser? Does this happen on more than one client machine as well as just on that server?

Adrien

Jan 11 07 11:47 am

adrien wrote:hi Olaf

Sorry, I meant could it be cached in the actual browser? Does this happen on more than one client machine as well as just on that server?

Adrien

I tried it from different machines with different browsers (Opera + IE) always the same I get only a few kb... very strange...

Jan 11 07 12:42 pm

is it always exactly the same size what you get or does it vary?

Adrien

Jan 12 07 9:12 am

adrien wrote:is it always exactly the same size what you get or does it vary?

Adrien

OK I did some tries with HTML proxy

1. 15.246 bytes IE 7
2. 15.246 bytes IE 7
3. 10.890 bytes IE 7
4. 15.246 bytes IE 7
5. 15.246 bytes Opera 9.10
6. 8.712 bytes Opera on another box (but under high traffic load, several downloads)
7 15.246 bytes bytes same box as 6. Opera 9.10 idle load

so in most cases 15.246 bytes may depend on the link speed..?

Jan 12 07 10:48 am

Hmmm

It's like the connection is being terminated within a short time.

Do you have any policies in ENS?

Adrien

Jan 12 07 12:01 pm

adrien wrote:Hmmm

It's like the connection is being terminated within a short time.

Do you have any policies in ENS?

Adrien

No ENS (this does not run on vista (since wrong driver (32bit NT Version) will be installed by the setup). The download progress in the browser shows ~15kb/s then less and less (at the end only a few bytes/s) and after around 2-5min (not measured) it shows download completed.

Jan 12 07 5:32 pm

the other servers you tried it on - were they running Vista as well?

Adrien

Jan 12 07 8:18 pm

adrien wrote:the other servers you tried it on - were they running Vista as well?

Adrien

Here I have only one wingate running as WWW Proxy (this is running under vista). The other wingate is running only internal.

For all tests above I used this "vista wingate". If I talk about other boxes I'm talking about clients using this wingate server.

Jan 12 07 10:15 pm

Hi

OK, understood.

Could you try turning off dripfeeding in the WWW proxy plugins pane?

I'm researching to see if there are any known issues with Vista's TCP stack.

Adrien

Jan 13 07 11:36 am

adrien wrote:Hi

OK, understood.

Could you try turning off dripfeeding in the WWW proxy plugins pane?

I'm researching to see if there are any known issues with Vista's TCP stack.

Adrien

I switched dripfeed off and also another try without any antivirus enabled. Both without getting the download. If you have any ideas how to find the problem (new logging or anything else ...) I will try to help you doing some tests...

Jan 13 07 11:54 am

It would be useful if you could get a packet capture of the traffic between the client and WinGate, and if possible another one for the traffic between WinGate and the server when this happens.

Regards

Adrien

Jan 14 07 12:14 pm

adrien wrote:It would be useful if you could get a packet capture of the traffic between the client and WinGate, and if possible another one for the traffic between WinGate and the server when this happens.

Regards

Adrien

I sent the captures but I'm not sure if I took the right mail address.

Jan 14 07 12:24 pm

got them thanks.

Jan 14 07 12:25 pm

do you get any firewall hits in WinGate relating to this traffic?

Jan 14 07 1:18 pm

adrien wrote:do you get any firewall hits in WinGate relating to this traffic?

There is no wingate firewall but I checked the vista firewall logs and the router logs - no entries at this time.

log without debugs enabled:
01/14/07 01:06:33 192.168.0.3 olaf.krause 0000005329 Requested: http://proinfo.pandasoftware.com/
01/14/07 01:06:33 192.168.0.3 olaf.krause 0000005329 Traffic 4269 454 416 4242 0s
01/14/07 01:06:40 192.168.0.3 olaf.krause 0000005330 Requested: http://bike-gps.idrz.de/updates/trup3_1.exe
01/14/07 01:07:34 192.168.0.3 olaf.krause 0000005329 Traffic 0 0 0 0 61s
01/14/07 01:09:07 192.168.0.3 olaf.krause 0000005330 Traffic 15523 349 288 20600 147s

with debugs:
01/14/07 01:19:27 192.168.0.3 olaf.krause 0000005349 Requested: http://bike-gps.idrz.de/updates/trup3_1.exe
01/14/07 01:19:27 192.168.0.3 olaf.krause 0000005349 Debug: [bike-gps.idrz.de/updates/trup3_1.exe] Copy to use: SERVER
01/14/07 01:19:27 192.168.0.3 olaf.krause 0000005349 Debug: WWW Session sending server request in thread 1600
01/14/07 01:19:27 192.168.0.3 olaf.krause 0000005349 Debug: WWW Session processing HTTP response in thread 1600 - response code 200
01/14/07 01:19:27 192.168.0.3 olaf.krause 0000005349 Debug: Drip-feeding resource to client
01/14/07 01:24:22 192.168.0.3 olaf.krause 0000005349 Traffic 17701 349 288 23504 295s
01/14/07 01:24:22 192.168.0.3 olaf.krause 0000005349 Terminated exit code 2

Jan 23 07 6:56 pm

this only to keep you informed and as a current summary:

Testenvironment:
Windows Vista RTM
Firefox 2.0
Opera 9.1
IE 7
Wingate 6.2
http://bike-gps.idrz.de/updates/trup3_1.exe for download tests

Teststeps:
1. If direct internet access I can download with IE 7
2. If direct internet access I can NOT download with Opera 9.10
3. If direct internet access I can NOT download with FireFox 2.0
4. If using Wingate as a Proxy the connection closes after the session timeout independent from which browser or client you use

In any connection abort case the connection is closed since the server (fileserver in the internet http://bike-gps.idrz.de/updates/trup3_1.exe) sends no more data. This was verified with ethereal traces.

 For me it looks like a compatibility problem of the TCP/IP stack on Vista in combination with specific servers. The strange thing is that this bike-gps… server is the only where I got this problems so far.

Cheers

Olaf[/b]

Feb 01 07 5:40 pm

Update:
It seems not to be wingate specific at least two other users were able to verify the problem with vista and firefox also (I posted the problem in hte german vista network newsgroup). But anyway it needs to be fixed. MS with a compatibility patch or within the client (new wingate/firefox etc.).