0 Replies Latest reply: Sep 26, 2017 6:42 AM by jjj RSS

SH Optimizing Outlook Anywhere

jjj

Hello,

 

I'm seeing traffic on port 8080 being identified as Outlook Anywhere and two different scenarios for the connections.

 

Some important points:

 

1 - Outlook Anywhere is not enabled

2 - No SH is part of a domain

 

But I'm still seeing 2 connections to the exact same server, one showing 59% data reduction and the other with 0% data reduction.

 

This is a connection with 0% data reduction:

 

Type:                           Optimized

Optimization Policy:            SDR,LZ

Encrypted Peering (SSL SH-SH):  no

Source:                         10.148.212.118:63091

Destination:                    10.148.216.79:8080

 

 

Application:                    HTTP

Reduction:                      0%

Client Side:                    yes

Since:                          2017/09/26 13:11:10

 

 

Peer Appliance:                 10.148.124.157:7800

Inner Local:                    10.147.0.11:41918

Outer Local:                    10.147.0.11:7801

Outer Remote:                   10.148.212.118:63091

WAN Visibility Mode:            Full Transparency

 

This is the log for the same:

sport[6739]: [splice/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} init client 10.148.212.118:63091 server 10.148.216.79:8080 cfe 10.147.0.11:7801 sfe 10.148.124.157:7800 inner_listen 10.147.0.11:7800 inner_endpt 10.147.0.11:0 client connected: yes

sport[6739]: [splice/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} trpy: TRPY_FULL, csum 0 local: 10.148.212.118:63091 remote: 10.148.216.79:8080

sport[6739]: [splice/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} QoS header match: src 10.148.212.118:63091, dst 10.148.216.79:8080, vlan 0, need_dpi true, wan tos 255, wan classid 0, wan classid ingress 0, lan tos 255, lan classid 0, lan classid i

sport[6739]: [splice/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} ngress 0

sport[6739]: [splice/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} Splice client side initializing HTTP. port: 8080 transport = TRANSPORT_ID_NONE

sport[6739]: [splice/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} Outlook Anywhere blade disabled: 'Outlook Anywhere Optimization' not enabled

sport[6739]: [splice/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} Start flowing, lport 41918, rport 7800, outer lport 7801, OPOL_NORMAL, NAGLE_ALWAYS, PREOPT_NONE, LATOPT_AUTO, TRANSPORT_ID_NONE, TPTOPT_NONE(0x0), TRPY_FULL

sport[6739]: [http/client/unit.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} Opt Scheme = OP-RA-SA-GR-IK-FS

sport[6739]: [http/client/unit.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} codec flow control is enabled

sport[6739]: [http/client/unit.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} Method not supported for prefetching: 7

sport[6739]: [http/client/unit.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} bypass, reason = UNSUPPORTED_METHOD

sport[6739]: [http/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} No Content-Length and no chunk encoding. Cannot parse a message with indeterminate length.

sport[6739]: [http/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} Failed to parse http body

sport[6739]: [http/client/app.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} Error parsing response data from HttpClient

sport[6739]: [http/client.INFO] 5608482 {10.148.212.118:63091 10.148.216.79:8080} Bypassing the connection

 

 

Now, basically the same scenario but a connection with 59% data reduction:

 

Type:                           Optimized

Optimization Policy:            SDR,LZ

Encrypted Peering (SSL SH-SH):  no

Source:                         10.148.212.115:64038

Destination:                    10.148.216.79:8080

 

 

Application:                    HTTP

Reduction:                      59%

Client Side:                    yes

Since:                          2017/09/26 13:09:27

 

 

Peer Appliance:                 10.148.124.157:7800

Inner Local:                    10.147.0.11:41181

Outer Local:                    10.147.0.11:7801

Outer Remote:                   10.148.212.115:64038

WAN Visibility Mode:            Full Transparency

 

And the log for the connection with data reduction:

 

080 cfe 10.147.0.11:7801 sfe 10.148.124.157:7800 inner_listen 10.147.0.11:7800 inner_endpt 10.147.0.11:0 client connected: yes

[splice/client.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} trpy: TRPY_FULL, csum 0 local: 10.148.212.115:64038 remote: 10.148.216.79:8080

[splice/client.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} QoS header match: src 10.148.212.115:64038, dst 10.148.216.79:8080, vlan 0, need_dpi true, wan tos 255, wan classid 0, wan classid ingress 0, lan tos 255, lan classid 0, lan classid i

[splice/client.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} ngress 0

[splice/client.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} Splice client side initializing HTTP. port: 8080 transport = TRANSPORT_ID_NONE

[splice/client.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} Outlook Anywhere blade disabled: 'Outlook Anywhere Optimization' not enabled

[splice/client.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} Start flowing, lport 52944, rport 7800, outer lport 7801, OPOL_NORMAL, NAGLE_ALWAYS, PREOPT_NONE, LATOPT_AUTO, TRANSPORT_ID_NONE, TPTOPT_NONE(0x0), TRPY_FULL

[http/client/unit.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} Opt Scheme = OP-RA-SA-GR-IK-FS

[http/client/unit.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} codec flow control is enabled

[http/client/unit.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} Method not supported for prefetching: 7

[http/client/unit.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} bypass, reason = UNSUPPORTED_METHOD

[splice/client.INFO] 5561205 {10.148.212.115:64038 10.148.216.79:8080} fini client 10.148.212.115:64038 server 10.148.216.79:8080 cfe 10.147.0.11:52944 sfe 10.148.124.157:7800 app HTTP

[splice/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} init client 10.148.212.115:64038 server 10.148.216.79:8080 cfe 10.147.0.11:7801 sfe 10.148.124.157:7800 inner_listen 10.147.0.11:7800 inner_endpt 10.147.0.11:0 client connected: yes

[splice/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} trpy: TRPY_FULL, csum 0 local: 10.148.212.115:64038 remote: 10.148.216.79:8080

[splice/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} QoS header match: src 10.148.212.115:64038, dst 10.148.216.79:8080, vlan 0, need_dpi true, wan tos 255, wan classid 0, wan classid ingress 0, lan tos 255, lan classid 0, lan classid i

[splice/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} ngress 0

[splice/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} Splice client side initializing HTTP. port: 8080 transport = TRANSPORT_ID_NONE

[splice/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} Outlook Anywhere blade disabled: 'Outlook Anywhere Optimization' not enabled

[splice/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} Start flowing, lport 41181, rport 7800, outer lport 7801, OPOL_NORMAL, NAGLE_ALWAYS, PREOPT_NONE, LATOPT_AUTO, TRANSPORT_ID_NONE, TPTOPT_NONE(0x0), TRPY_FULL

[http/client/unit.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} Opt Scheme = OP-RA-SA-GR-IK-FS

[http/client/unit.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} codec flow control is enabled

[http/client/unit.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} Method not supported for prefetching: 7

[http/client/unit.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} bypass, reason = UNSUPPORTED_METHOD

[http/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} No Content-Length and no chunk encoding. Cannot parse a message with indeterminate length.

[http/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} Failed to parse http body

[http/client/app.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} Error parsing response data from HttpClient

[http/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} Bypassing the connection

[splice/client.INFO] 5607669 {10.148.212.115:64038 10.148.216.79:8080} fini client 10.148.212.115:64038 server 10.148.216.79:8080 cfe 10.147.0.11:41181 sfe 10.148.124.157:7800 app HTTP

 

 

Thanks