Max que of connections

Discussion regarding AV.

Moderators: Nic, bhfoto, payne747, mmauch

Max que of connections

Postby teo665 on Tue Nov 03, 2009 1:22 pm

Hi, Is it possible that the queued connections might get maxed out if there is an AV update going on? I have a bit of log data below. the best practices are in place on the SG, so it is hard to tell what is going on. Any ideas?

ATEXT=Warning! 71 ICAP connections are "slow". (Warning threshold 70 connections)

2009-11-03 07:04:12-05:00EST
Hardware serial number: 0408081028
ProxyAV 3.1.1.7(31501) - http://www.BlueCoat.com/
Machine name: AV1
Machine IP address: 10.99.0.53

"Slow" ICAP connections:
(1) http://omalleynyb.com/images/albums/New ... 02-009.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-029.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-001.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-022.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-012.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-021.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-013.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-005.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-014.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-027.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-007.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-016.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-024.JPG
(1) http://omalleynyb.com/images/albums/New ... 02-017.JPG
(1) http://omalleynyb.com/images/albums/New ... _0021a.jpg
(1) http://omalleynyb.com/images/albums/New ... _0066a.jpg
(1) http://omalleynyb.com/images/albums/New ... _0025a.jpg
(1) http://omalleynyb.com/images/albums/New ... _0041a.jpg
(1) http://omalleynyb.com/images/albums/New ... _0049a.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0031.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0013.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0075.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0020.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-029b.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0030.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-028b.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0044.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0066.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-018b.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0067.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0045.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0001.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-018c.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-008b.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-029a.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0060.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-008e.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-018d.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0025.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0073.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0015.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0062.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0051.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0004.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0027.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0050.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0036.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0063.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0072.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0028.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0039.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0038.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0080.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0009.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0018.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0079.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0069.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-006b.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-027a.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0048.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-006a.jpg
(1) http://omalleynyb.com/images/albums/New ... 2-027b.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0049.jpg
(1) http://omalleynyb.com/images/albums/New ... 08_006.jpg
(1) http://omalleynyb.com/images/albums/New ... 08_002.jpg
(1) http://omalleynyb.com/images/albums/New ... 08_012.jpg
(1) http://omalleynyb.com/images/albums/New ... n_0047.JPG
(1) http://omalleynyb.com/images/albums/New ... n_0077.JPG
(1) http://omalleynyb.com/images/albums/New ... n_0043.JPG
(1) http://omalleynyb.com/images/albums/New ... n_0082.JPG
(1) http://omalleynyb.com/images/albums/New ... n_0081.JPG

;CHARSET=;SUBJECT=ProxyAV Intelligent Connection Traffic Monitoring Warning Alert.;TARGET=%TARGET;

ATEXT==========================================
Antivirus Update completed ok:
2009-11-03 07:04:15-05:00EST
Hardware serial number: 0408081028
ProxyAV (3.1.1.7(31501)) - http://www.BlueCoat.com/
Antivirus Vendor: Sophos, Plc.
Scan Engine Version: 3.1.0
Pattern File Version: 4.47E.1133668.979637368 (Timestamp: 2009/11/03 11:27:00)
Machine name: AV1
Machine IP address: 10.99.0.53
=========================================;CHARSET=;SUBJECT=Antivirus Update status;TARGET=%TARGET;

ATEXT=Leaving warning state. Only 0 "slow" ICAP connections are left. (Warning threshold 70 connections)

2009-11-03 07:04:43-05:00EST
Hardware serial number: 0408081028
ProxyAV 3.1.1.7(31501) - http://www.BlueCoat.com/
Machine name: AV1
Machine IP address: 10.99.0.53

"Slow" ICAP connections:

;CHARSET=;SUBJECT=ProxyAV Intelligent Connection Traffic Monitoring Warning Alert.;TARGET=%TARGET;

ATEXT=Cause: Maximum file size exceeded (engine error code: 0)

File has been passed through unscanned.


2009-11-03 07:48:02-05:00EST
Hardware serial number: 0408081028
ProxyAV (Version 3.1.1.7(31501)) - http://www.BlueCoat.com/
Machine name: AV1
Machine IP address: 10.99.0.53
Server: 72.21.207.102
Client: 10.115.83.180
Protocol: ICAP

URL: http://media.blackbottom.com/videos/spi ... 5y5Ei4Q%3D
;CHARSET=;SUBJECT=ProxyAV Administrative Alert.;TARGET=%TARGET;


Thanks :twisted:
teo665
 
Posts: 98
Joined: Wed May 14, 2008 1:57 pm

Re: Max que of connections

Postby keving on Fri Nov 13, 2009 1:17 pm

teo665 wrote:Hi, Is it possible that the queued connections might get maxed out if there is an AV update going on?


Typically no but you're running a very old ProxyAV version.

You might want to consider updating it.
keving
Guru
 
Posts: 3219
Joined: Wed Jan 19, 2005 10:05 am


Return to Blue Coat AV Appliances

Who is online

Users browsing this forum: No registered users and 1 guest