rejetto forum

2.0 coming...

rejetto · 1151 · 868889

0 Members and 14 Guests are viewing this topic.

Offline maverick

  • Tireless poster
  • ****
    • Posts: 1052
  • Computer Solutions
    • View Profile
Is there a list somewhere that shows all of the valid template symbols?
maverick


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
beta37 @ www.rejetto.com/temp/hfs2.0beta37.zip

please, tell if processQ is still alive (no need for full reports)

what's new
+ Log Menu -> "Apache log file format..."
- N-th attempt to fix the processQ bug
- possible AV switching off the server


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
Quote from: "maverick"
Is there a list somewhere that shows all of the valid template symbols?
yes, it is sticked in the template forum ;)


Offline maverick

  • Tireless poster
  • ****
    • Posts: 1052
  • Computer Solutions
    • View Profile
Quote from: "rejetto"
Quote from: "maverick"
Is there a list somewhere that shows all of the valid template symbols?
yes, it is sticked in the template forum ;)
Thanks.  Didn't think to look there.  That list was posted on Dec 16, 2004 and never updated.

Quote
what's new
+ Log Menu -> "Apache log file format..."
Can you suggest a good freeware apache log analyzer that would work with these log files from HFS?

Quote
what's new
- possible AV switching off the server
What does this mean? Is it to stop antivirus programs from switching off the server?

HFS is really taking shape.  Good Job,Well Done.  With luck you just might have killed that processQ bug this time.  I feel that a HFS v2.0 FINAL is getting very close.
maverick


Azag

  • Guest
This is sweet! I had been waiting for an apache type compliant log format just so I could see or send myself logs that group the data nicely for viewing and stats, ect.  Wasn't expecting it any time soon as you had bigger things to take on with processQ bug and understandibly so. Thankfully not suffering this bug myself or at least not getting an error per se. My AV scanner which I use a lot haven't had conflict either tahnk goodness as I can imagine this would be quite a hassle for those effected.  I use mine AV and AS scanners in on-demand only in general and they are not used for monitoring as I do this myself since I am well versed in detecting and collection /analysis of malware (I'm kind of a security hobbist you could say.)  But have had some strange behavior which is only best shown in screen shots.
This problem has got better for me since around beta30 or so and doesn't eat up cpu cycles anymore which is very good to see but still eats up the RAM and connections in log window in GUI leave grayed out ghosts of old connections even after beeing closed and making the little scroll on the side fill up and by the way this behavoir still happens with external logging all off and no logging in video just the current connections on the bottom of the interface fill up and sometimes can't cope. this seems to be the result of to many connections to fast from abusive download managers which probably seem really great to the end user but totally disregard the hammering of a server and seems the buggier they are the more people like them...since most people using them to visit me don't realize or know any better.   ;)   This hammering also causes some weird phantom ports (ususally one to open) sometimes that is connected to nothing and it is not a rootkit, trojan, or worm ect. of any sort as I have tracked this and checked extensively to be sure and scan with Kaspersky Anti-Virus Pro  and NOD32 and SpyBot S&D and Ad-Aware SE Pro, SpywareBlaster, MS AntiSpyware Beta, UnHackMe, AnalogX Script Defender, F-secure Blacklight Beta, CWShedder, HiJackThis, IceSword, and CCleaner si used after browsing before I ever reboot.  :lol:  :P   Sorry for long list I like to test a lot of software and all is not active or run at once or anything crazy but is used fequently and kept updated daily.  I run Win XP SP1 w/ all updates (SP2 sucks imho) on 1GHz Athlon processor w/ 640MB SDRAM everything runs cool and no hardware problems and don;'t overlclock but use an open side panel with large oscillating fan for extra cooling so my system will last until I can afford better.  :lol: Probelm seems to start a while after a byte ranged download manager (or browser?) tries to access/downlaod file to fast like I said but I have only screenshots as this is not causing an erro  or shutdown of HFS.  I try to hide the true nature of the server taht is running from my guests due to the type of people my site sometimes attracts as the would love to find a way to exploit me or hack out a backdoor so to speak and as such I have edited the template be clear. So if you see my site don't think I remove the link here or HFS tag for any other reason as I am not looking to steal your hard work and would never even think of doing so ...if it weren't for your software I would have no site to play with hell I don't even use any ads to pay for my weak broadband through wireless and I'm lucky to get what I have speed wise at all since I am 150' from router w/out wires. ;)   If anybody has any hints or Ideas about this weird problem of mine which could help or improve it let me know.   rejetto hats off to you for the quick update responses you have made recently and nice new features.  If I new which libs were needed and learned how to code Delphi better I would try to help add features sicne this is open source but I need to learn more and read a couple of books of course it would take many years before I would have a fraction of your skills as a coders but we all gotta start somewhere.  :lol:  Here is links to the errors/weird problem and don't forget to notice the grayed out lines and lengthy scrool filled up in the connections list.  Thanks again.  Screenshot are here please not e files are set with there attributes hdden so you may have to use FOLDER OPTIONS--> Show Hidden Files and Folders
(for you to view them in windows this is done for obvious reasons ..again to hide them from regulars who surf my site ssadly or some other hacker types or wannbe ones):

http://vxchaos.cjb.net/Uploads/SERVER%20ERRORS/Abnormal%20Extra%20Port%20Open%20in%20HFS.JPG

http://vxchaos.cjb.net/Uploads/SERVER%20ERRORS/Clogged%20with%20dead%20connections.JPG

http://vxchaos.cjb.net/Uploads/SERVER%20ERRORS/HFS%20Problem%20pic2.JPG

http://vxchaos.cjb.net/Uploads/SERVER%20ERRORS/HFS%20Problem%20pic1.JPG


I will leave these links to these hidden files up for only a few days hopefully long enough for others to see pics and see if anyone elses has exxperienced this beside me.  I they give to much detail about visitors or anything than please admin view and remove links from the forum if you wish hopefull not a problem thoughI don't think otherwise I wouldn't post to forum and just send info direct from email. Thanks in advance for any help or hints all.  :D


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
Quote from: "maverick"
Thanks.  Didn't think to look there.  That list was posted on Dec 16, 2004 and never updated.
then surely it lacks something

Quote
Quote
what's new
+ Log Menu -> "Apache log file format..."
Can you suggest a good freeware apache log analyzer that would work with these log files from HFS?
http://www.snapfiles.com/freeware/webpublish/fwlogalyzer.html

Quote
Quote
what's new
- possible AV switching off the server
What does this mean? Is it to stop antivirus programs from switching off the server?
AV in what's new always stands for access violation


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
about the extra open port:
it is not normal at all, i had a look at source code and it should be impossible, so i would ensure that port is open.
try telnetting localhost at such port and see if it opens.
if it doesn't, then it is fake information.
if it even opens, i would test quitting HFS and watching the port to see if it stay open.

about the ghost connections, well, it is a bug, so it should be fixed, doesn't matter if downloader are polite or not. :)
how can i reproduce this bug?


Offline maverick

  • Tireless poster
  • ****
    • Posts: 1052
  • Computer Solutions
    • View Profile
Azag

Try Current Ports (freeware) - gives you much more information than what you are using now. I've caught some spyware using this.

http://www.nirsoft.net/utils/cports.zip
maverick


Offline maverick

  • Tireless poster
  • ****
    • Posts: 1052
  • Computer Solutions
    • View Profile
v2.0 beta 37

The default template progress bar in [progress-upload-file] and [progress-download-file] hasn't been fixed. (must have been missed).

To fix, should be:
<div class=out_bar><div class=in_bar style="width:%perc%px"></div></div><span class=perc>%perc%% complete</span></div>
maverick


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
Quote from: "maverick"
The default template progress bar in [progress-upload-file] and [progress-download-file] hasn't been fixed. (must have been missed).
forgot one thing recompiling... |)
next beta


Azag

  • Guest
Thanks for the feedback both rejetto and maverick. I was mistaken on what AV meant hehe but rarely had that problem.  :#)  Thx for taking time to answer me back.  I am using TCPView v2.34 and Active Ports v1.4 for monitoring. I will try the program you suggested maverick so I can try to gather more info and maybe get some insite as to if this is a bug or other problem. I have tried a lot of angles to analyze this for months including various sniffers but i'm still scratching my head trying to figure out the cause and how to reproduce the bug sicne I have no log or debug data for this since there is no error or log info to show.  :eek:  Does HFS have a debug switch hidden that i can use from commandline maybe? I will try the telnet to check in case did try http and ftp to open listening port that shouldn't be there but connection was refused adn it doesn't look like anyone has ever gotten in on a different port other than normal port 80, so I don't think I am being comprimised in any way. I might also mention I use a free redirect to my real IP which is obvious but worth mentioning.  It used to be no-ip.com service but now is cjb.net but not sure this would have any real impact on the situation. Also some of the listening ports you will notice are from the router i believe and aren't anything to worry about but are normally there after there when my connection is alive but can't be accessed by others either. It was just the extra occasional listening port from HFS that has had be baffled. :?    I will keep watching and post back any new info that might help shed light on this soon as I have new data and of course keep reading the forum.  Thanks for all the help and this great program.  My email is vxchaos-at-gmail.com and site is http://vxchaos.cjb.net or http://vxchaos.official.ws if anyone wants to reach me privately or otherwise for anything. Feel free to stop by my site anytime if anyone needs some good tools, info/eBooks,ect. I got lots of stuff.   :D   Sorry, I am long winded sometimes.  ;)

Peace,

Azag


Azag

  • Guest
Quote from: "rejetto"
about the extra open port:
it is not normal at all, i had a look at source code and it should be impossible, so i would ensure that port is open.
try telnetting localhost at such port and see if it opens.
if it doesn't, then it is fake information.
if it even opens, i would test quitting HFS and watching the port to see if it stay open.

about the ghost connections, well, it is a bug, so it should be fixed, doesn't matter if downloader are polite or not. :)
how can i reproduce this bug?

Almost forgot to mention it but yes extra port closes after quitting HFS. I checked that several times in the past to see what would happen after quitting.
Not sure how to reproduce the ghost conections yet but I will try some several download managers on myself to test. I can only say that the ghost connections and extra port seem to manifest at the same time from what I observed but maybe this is some weird software conflict from me browsing (but happens anyway even if I don't so maybe not) while others are on my site.  I stripped down running services from Administrative
Tools and kill anything not needed in Task Manager for speed and security. About 17 to 22 running tasks on average. I always watching for rogue processes and have a good understanding of what they are (the normal or bad ones to watch for.)  Don't know if this new info might help but figured I would let you know.  Thanks again.  Keep up the great work.  :)


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
i didn't say anything about your "dead connections".
it is absolutely normal, Windows doesn't release system resources instantly after closing a TCP connection, those are the ones waiting to be released, and are not working.


Offline maverick

  • Tireless poster
  • ****
    • Posts: 1052
  • Computer Solutions
    • View Profile
Please refesh my memory.  Can you tell me what "Specific HTML for Download Managers" does and what Specific HTML is expected with that setting enabled?  (Menu -> Other Options).

What is the default setting for this - enabled or disabled.
maverick


Azag

  • Guest
Quote from: "rejetto"
i didn't say anything about your "dead connections".
it is absolutely normal, Windows doesn't release system resources instantly after closing a TCP connection, those are the ones waiting to be released, and are not working.

I understand about the dead connections what I meant referring to ghost connections was those gray horizontal bars in bottom of GUI with the list of active connections and transfers. Even after turning the Server off they are still there and infoabout them can be revealed with right click  (with leave disconnection connections OFF) this shouldn't happen and doesn't make sense to me but it happens that they are still there even after killing my internet connection by turning the network connection off.  Also forgot to mention that after this behavior when I turn HFS off and try to quit, whether or not I am connected to the internet, HFS will not shutdown. It will only shutdown by killing the process in Task Manager or an external process killer.  It is not hung since I can still click buttons in GUI and even turn it on again and run but once I see those gray bars where old connections had been it is then not possible to quit HFS.  This seems weird but I could maybe better show proof with a flash presentation using Demo Builder or something so you see what I mean. See the pictures I uploaded to refer to what I said about "gray bars" in the live connections manager spot (bottom) in the GUI.  I have also uploaded a TCPView report and a CurrPorts report of the connections just when someone had overloaded it a few minutes ago with to many requests to fast and this caused the "bug" to appear or at least this was the capture of my connections a few mere seconds after it happened. They were using a download manager  the used a "byte range" type of downloader that seems to cause this behavior almost always but not sure of the model or maker of download manager since if was not referred to with right click info but was most certainly not a standard browser from my experience and User-Agent info revealed nothing but Mozilla/4.0 but it was not and mouse over says: <unknown>
"Byte range" example:   Range: bytes=128480-1637017
Sorry for confusing explanations.  :#)  :lol:

Here you can check the reports if they might help:

http://vxchaos.cjb.net/Uploads/SERVER%20ERRORS/TCPView%20Report%202-12-06.txt

http://vxchaos.cjb.net/Uploads/SERVER%20ERRORS/CurrPorts%20report%202-12-06.html

I apologize again if I am being a pain in your ass rejetto by bring my problem to you at this point when your probably busy as hell to begin with.
Any input is greatly appreciated though even if you can't find anyone else with this problem.  :?  I intend keep running it whether or not I can fix this sicne this is the best program of it's type I've ever tested and at this time the most secure which in my mind makes it priceless.  :D
People seem to like to penetration test my site sometimes and with HFS I can ususally catch them in the act...then I temp ban them or perma if they are a real problem. ;)  :lol: It is a lot harder to do that in real time with any other server if not impossible.