View Single Post
  #3 (permalink)  
Old 05-31-2009, 02:55 PM
Microsaft Microsaft is offline
Senior Member
 
Join Date: Jul 2006
Posts: 172
Default

Hi BAlfson,

no the samples should be correct ;-)

But following lines are interesting:
Code:
2009:05:31-17:49:40 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="267 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:40 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="214 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:40 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="225 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:40 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="264 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:41 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="193 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:41 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="210 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%25252525252525252525252525252526reason=0%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:41 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="204 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%2525252525252525252525252525252526reason=0%25252525252525252525252525252526reason=0%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:41 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="240 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%252525252525252525252525252525252526reason=0%2525252525252525252525252525252526reason=0%25252525252525252525252525252526reason=0%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526re" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:42 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="223 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%25252525252525252525252525252525252526reason=0%252525252525252525252525252525252526reason=0%2525252525252525252525252525252526reason=0%25252525252525252525252525252526reason=0%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
Looks like that there's something added -the URL get's longer and longer....