Comments for Angelo's blog

Comment on Graphing requests per second out of apache log files by Andrew

Andrew — Thu, 22 Jul 2010 01:48:50 +0000

You’re right, the timestamps being out of order is because of the difference between the time at which a request starts (the timestamp on the log line) and when it finishes (which is when it’s written into the log line).

This is very useful information. It may not be something you want for your current purpose, but it would be a shame to throw this information away.

It’s very useful to be able to identify the log lines where the timestamp recorded is significantly behind the latest timestamp seen by that point in the logs, as this identifies the long running requests, which are likely to be performance issues on your site.

Comment on Setting up OpenVPN using radius on FreeBSD by krzee

krzee — Fri, 21 May 2010 04:43:17 +0000

a) you only need a bridge when you have a layer2 protocol going over the vpn. If using IP traffic use tun so you have less overhead and layer2 attacks will not work over the vpn.

b) 2.1.1 has the windows gui built in, http://www.openvpn.net/download
the .se link is no longer up to date

sorry for the doublepost, i had a typo to fix

Comment on Setting up OpenVPN using radius on FreeBSD by krzee

krzee — Fri, 21 May 2010 04:42:16 +0000

a) you only need a bridge when you have a layer2 protocol going over the vpn. If using IP traffic use tun so you have less overhead and layer2 attacks will not work over the vpn.

b) 2.1.1 has the windows gui built in, http://www.openvpn.net/download
the .se link is no longer up to date

Comment on Protect OWA using a reverse proxy by Kyle

Kyle — Wed, 10 Feb 2010 17:34:41 +0000

I figured out the record too long thing

And the answer was……?

Comment on Protect OWA using a reverse proxy by Arch Willingham

Arch Willingham — Wed, 27 Jan 2010 10:52:11 +0000

Oh well….thanks anyway!
Arch

Comment on Protect OWA using a reverse proxy by angelo

angelo — Tue, 26 Jan 2010 18:52:13 +0000

I don’t use RPC over http, I only use OWA.. Can’t help you with that, sorry.

Comment on Protect OWA using a reverse proxy by Arch Willingham

Arch Willingham — Tue, 26 Jan 2010 16:28:43 +0000

I figured out the record too long thing….now I’m stuck with the certificate problems (or whatever ever is keeping them from talking). OWA works but Outlook HTTP/RPC flat will not work How did you do your certificates?.

Arch

Comment on Protect OWA using a reverse proxy by angelo

angelo — Tue, 26 Jan 2010 14:35:22 +0000

don’t know, try http://www.google.com/search?q=squid+ssl_error_rx_record_too_long

Comment on Protect OWA using a reverse proxy by Arch Willingham

Arch Willingham — Tue, 26 Jan 2010 01:41:20 +0000

I have tried this and I can’t get it to work. I get errors about

An error occurred during a connection to owa.oursite.com.

SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)

Then the /var/log/httpd/error_log shows these errors:

[Mon Jan 25 20:36:05 2010] [error] [client 68.60.30.212] Invalid method in request \x16\x03\x01
[Mon Jan 25 20:36:05 2010] [error] [client 68.60.30.212] Invalid method in request \x16\x03\x01
[Mon Jan 25 20:36:22 2010] [error] [client 68.186.192.18] Invalid method in request \x16\x03\x01
[Mon Jan 25 20:36:26 2010] [error] [client 68.60.30.212] Invalid method in request \x16\x03\x01
[Mon Jan 25 20:36:26 2010] [error] [client 68.60.30.212] Invalid method in request \x16\x03\x01

Any ideas?

Arch

Comment on Graphing requests per second out of apache log files by angelo

angelo — Sat, 23 Jan 2010 09:06:56 +0000

The link works for me, but here’s a mirror: http://files.hongens.nl/2010/01/23/requests.rb