Inquiridor
Problemas ao acessar alguns sites.

Pergunta
-
Boa tarde Pessoal,
Estou enfrentando problemas de conexão a alguns sites da web, como por exemplo o http://docs.jquery.com e http://www.maujor.com. O mais estranho é que o ISA não retorna nenhum erro, apenas timeout depois de 30 minutos aproximadamente. Se não passar pelo ISA, os sites carregam normalmente. Notei também que a resposta destes dois servidores ao GET é 301 e não 200. O pessoal do desenvolvimento WEB da minha empresa está no meu pé, pois usam diariamente estes sites. Não sei se é coincidência ou não, mas os problemas começaram quando resolvi alterar as configurações de cache em RAM, aumentei o percentual de uso de memória disponível e o tamanho máximo dos arquivos que podem ser armazenados na memória. Mesmo depois de voltar estas configurações para o padrão os problemas persistem. Neste final de semana refiz todo o servidor (desde SO) e ainda assim não resolveu. O ISA roda em um Windows 2003 R2 Std com SP2 e totalmente atualizado. As atualizaçoes do ISA também estão em dia. Segue abaixo parte do log.
Client Agent Authenticated Client Service Server Name Destination Host Name Transport MIME Type Object Source Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 1.1.4322) Yes Proxy PROXY www.maujor.com TCP text/html; charset=iso-8859-1 Internet 0 562 562 567 301 Moved Permanently 0x20000000 0x400 Web Proxy Filter 13/07/2009 11:49 67.15.102.204 80 http Allowed Connection Acesso TI 172.16.1.5 anonymous Internal External GET http://www.maujor.com/ Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 1.1.4322) Yes Proxy PROXY www.maujor.com TCP text/html Internet 0 1801938 1426 326 1460 This operation returned because the timeout period expired. 0x20000005 0x480 Web Proxy Filter 13/07/2009 12:20 67.15.102.204 80 http Failed Connection Attempt Acesso TI 172.16.1.5 anonymous Internal External GET http://www.maujor.com/index.php
Agradeço desde já pela atenção.
Antonio Carlos Gomiero Junior
Todas as Respostas
-
-
Boa tarde Diego,
Agradeço a atenção, mas não acredito que seja este o problema, tenho aqui dois Frame-Relay de 2Mb cada, com balanceamento por pacote, totalizando 4Mb de link.
fiz uma captura dos pacotes na placa externa do ISA e constatei que durante o download do site, a comunicação simplesmente pára. Segue abaixo a captura. (substituí meu IP por XXX.XXX.XXX.XXX)
Frame 2676 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: 3com_9f:c6:24 (00:10:5a:9f:c6:24), Dst: Cisco_13:67:c8 (00:1c:f6:13:67:c8)
Internet Protocol, Src: XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX), Dst: 67.15.102.204 (67.15.102.204)
Transmission Control Protocol, Src Port: 31540 (31540), Dst Port: http (80), Seq: 0, Len: 0
Source port: 31540 (31540)
Destination port: http (80)
[Stream index: 125]
Sequence number: 0 (relative sequence number)
Header length: 28 bytes
Flags: 0x02 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgement: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
[Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
[Message: Connection establish request (SYN): server port http]
[Severity level: Chat]
[Group: Sequence]
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xd448 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permittedFrame 2688 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: Cisco_13:67:c8 (00:1c:f6:13:67:c8), Dst: 3com_9f:c6:24 (00:10:5a:9f:c6:24)
Internet Protocol, Src: 67.15.102.204 (67.15.102.204), Dst: XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX)
Transmission Control Protocol, Src Port: http (80), Dst Port: 31540 (31540), Seq: 0, Ack: 1, Len: 0
Source port: http (80)
Destination port: 31540 (31540)
[Stream index: 125]
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 28 bytes
Flags: 0x12 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgement: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
[Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
[Message: Connection establish acknowledge (SYN+ACK): server port http]
[Severity level: Chat]
[Group: Sequence]
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x79be [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2676]
[The RTT to ACK the segment was: 0.187500000 seconds]Frame 2689 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 3com_9f:c6:24 (00:10:5a:9f:c6:24), Dst: Cisco_13:67:c8 (00:1c:f6:13:67:c8)
Internet Protocol, Src: XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX), Dst: 67.15.102.204 (67.15.102.204)
Transmission Control Protocol, Src Port: 31540 (31540), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
Source port: 31540 (31540)
Destination port: http (80)
[Stream index: 125]
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgement: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x68ca [incorrect, should be 0xbd52 (maybe caused by "TCP checksum offload"?)]
[Good Checksum: False]
[Bad Checksum: True]
[Expert Info (Error/Checksum): Bad checksum]
[Message: Bad checksum]
[Severity level: Error]
[Group: Checksum]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2688]Frame 2690 (587 bytes on wire, 587 bytes captured)
Ethernet II, Src: 3com_9f:c6:24 (00:10:5a:9f:c6:24), Dst: Cisco_13:67:c8 (00:1c:f6:13:67:c8)
Internet Protocol, Src: XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX), Dst: 67.15.102.204 (67.15.102.204)
Transmission Control Protocol, Src Port: 31540 (31540), Dst Port: http (80), Seq: 1, Ack: 1, Len: 533
Source port: 31540 (31540)
Destination port: http (80)
[Stream index: 125]
Sequence number: 1 (relative sequence number)
[Next sequence number: 534 (relative sequence number)]
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgement: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x6adf [incorrect, should be 0xb644 (maybe caused by "TCP checksum offload"?)]
[Good Checksum: False]
[Bad Checksum: True]
[Expert Info (Error/Checksum): Bad checksum]
[Message: Bad checksum]
[Severity level: Error]
[Group: Checksum]
[SEQ/ACK analysis]
[Number of bytes in flight: 533]
Hypertext Transfer ProtocolFrame 2705 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_13:67:c8 (00:1c:f6:13:67:c8), Dst: 3com_9f:c6:24 (00:10:5a:9f:c6:24)
Internet Protocol, Src: 67.15.102.204 (67.15.102.204), Dst: XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX)
Transmission Control Protocol, Src Port: http (80), Dst Port: 31540 (31540), Seq: 1, Ack: 534, Len: 0
Source port: http (80)
Destination port: 31540 (31540)
[Stream index: 125]
Sequence number: 1 (relative sequence number)
Acknowledgement number: 534 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgement: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xa21d [correct]
[Good Checksum: True]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2690]
[The RTT to ACK the segment was: 0.171875000 seconds]Frame 2711 (823 bytes on wire, 823 bytes captured)
Ethernet II, Src: Cisco_13:67:c8 (00:1c:f6:13:67:c8), Dst: 3com_9f:c6:24 (00:10:5a:9f:c6:24)
Internet Protocol, Src: 67.15.102.204 (67.15.102.204), Dst: XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX)
Transmission Control Protocol, Src Port: http (80), Dst Port: 31540 (31540), Seq: 1, Ack: 534, Len: 769
Source port: http (80)
Destination port: 31540 (31540)
[Stream index: 125]
Sequence number: 1 (relative sequence number)
[Next sequence number: 770 (relative sequence number)]
Acknowledgement number: 534 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgement: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x5e07 [correct]
[Good Checksum: True]
[Bad Checksum: False]
[SEQ/ACK analysis]
[Number of bytes in flight: 769]
TCP segment data (769 bytes)Frame 2712 (681 bytes on wire, 681 bytes captured)
Ethernet II, Src: Cisco_13:67:c8 (00:1c:f6:13:67:c8), Dst: 3com_9f:c6:24 (00:10:5a:9f:c6:24)
Internet Protocol, Src: 67.15.102.204 (67.15.102.204), Dst: XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX)
Transmission Control Protocol, Src Port: http (80), Dst Port: 31540 (31540), Seq: 770, Ack: 534, Len: 627
Source port: http (80)
Destination port: 31540 (31540)
[Stream index: 125]
Sequence number: 770 (relative sequence number)
[Next sequence number: 1397 (relative sequence number)]
Acknowledgement number: 534 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgement: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xc738 [correct]
[Good Checksum: True]
[Bad Checksum: False]
[SEQ/ACK analysis]
[Number of bytes in flight: 1396]
TCP segment data (627 bytes)Frame 2713 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 3com_9f:c6:24 (00:10:5a:9f:c6:24), Dst: Cisco_13:67:c8 (00:1c:f6:13:67:c8)
Internet Protocol, Src: XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX), Dst: 67.15.102.204 (67.15.102.204)
Transmission Control Protocol, Src Port: 31540 (31540), Dst Port: http (80), Seq: 534, Ack: 1397, Len: 0
Source port: 31540 (31540)
Destination port: http (80)
[Stream index: 125]
Sequence number: 534 (relative sequence number)
Acknowledgement number: 1397 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgement: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 64139
Checksum: 0x68ca [incorrect, should be 0xbb3d (maybe caused by "TCP checksum offload"?)]
[Good Checksum: False]
[Bad Checksum: True]
[Expert Info (Error/Checksum): Bad checksum]
[Message: Bad checksum]
[Severity level: Error]
[Group: Checksum]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2712]GET /index.php HTTP/1.1 Via: 1.1 PROXY User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 1.1.4322) Host: www.maujor.com Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, */* Accept-Language: pt-br UA-CPU: x86 Connection: Keep-Alive HTTP/1.1 200 OK Date: Mon, 13 Jul 2009 19:23:47 GMT Server: Apache Keep-Alive: timeout=10, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html 244 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="pt-br"> <head> <title>Tutoriais CSS | HTML | XHTML | Normas do W3C | Tableless | Web Standards | Acessibilidade</title> <meta name="description" content="Tutoriais sobre CSS, XHTML, HTML, acessibilidade e Padr.es Web em geral. Tradu..es de documentos t.cnicos do W3C e de artigos de consagrados autores que advogam Web Standards." /> <meta name="verify-v1" content="7cbL0pDFrGAjwDosngmCT0io1yg8zgz52KKk8VLuWgA=" /> 26c <meta name="keywords" content="css, folhas estilo cascata, tutoriais, web standards, padr.es web, acessibiliadde, tableless" /> <meta name="author" content="Mauricio Samy Silva" /> <meta name="MSSmartTagsPreventParsing" content="true" /> <meta http-equiv="imagetoolbar" content="no" /> <meta http-equiv="Pragma" content="no-cache" /> <meta name="robots" content="all" /> <meta http-equiv="content-language" content="pt-br" /> <meta name="ICBM" content="-22.976781,-43.193082" /> <meta name="DC.title" content="CSS para Web Design" /> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
Sendo que quando eu acesso o site antes do ISA, após a última linha recebida (<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />), o site continua a carregar normalmente.
Atenciosamente,
Antonio Carlos Gomiero Junior -
Boa tarde Pessoal,
Estou enfrentando problemas de conexão a alguns sites da web, como por exemplo o http://docs.jquery.com e http://www.maujor.com. O mais estranho é que o ISA não retorna nenhum erro, apenas timeout depois de 30 minutos aproximadamente. Se não passar pelo ISA, os sites carregam normalmente. Notei também que a resposta destes dois servidores ao GET é 301 e não 200. O pessoal do desenvolvimento WEB da minha empresa está no meu pé, pois usam diariamente estes sites. Não sei se é coincidência ou não, mas os problemas começaram quando resolvi alterar as configurações de cache em RAM, aumentei o percentual de uso de memória disponível e o tamanho máximo dos arquivos que podem ser armazenados na memória. Mesmo depois de voltar estas configurações para o padrão os problemas persistem. Neste final de semana refiz todo o servidor (desde SO) e ainda assim não resolveu. O ISA roda em um Windows 2003 R2 Std com SP2 e totalmente atualizado. As atualizaçoes do ISA também estão em dia. Segue abaixo parte do log.
Client Agent Authenticated Client Service Server Name Destination Host Name Transport MIME Type Object Source Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 1.1.4322) Yes Proxy PROXY www.maujor.com TCP text/html; charset=iso-8859-1 Internet 0 562 562 567 301 Moved Permanently 0x20000000 0x400 Web Proxy Filter 13/07/2009 11:49 67.15.102.204 80 http Allowed Connection Acesso TI 172.16.1.5 anonymous Internal External GET http://www.maujor.com/ Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 1.1.4322) Yes Proxy PROXY www.maujor.com TCP text/html Internet 0 1801938 1426 326 1460 This operation returned because the timeout period expired. 0x20000005 0x480 Web Proxy Filter 13/07/2009 12:20 67.15.102.204 80 http Failed Connection Attempt Acesso TI 172.16.1.5 anonymous Internal External GET http://www.maujor.com/index.php
Agradeço desde já pela atenção.
Antonio Carlos Gomiero JuniorEstou com esse mesmo problema, como você resolveu???