[isalist] Re: Extremely slow connection to Fedex.com
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Fri, 17 Nov 2006 15:45:01 -0800
http://www.ISAserver.org
-------------------------------------------------------
<shrugs humbly>
Interesting; so you had to use the default IE caching behavior and set 1.1?
I need to try that and see what the differences are on both sides of ISA.
..that will be much later, though.
I'm escaping to Vancouver, BC for the weekend.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of John T (Lists)
Sent: Friday, November 17, 2006 15:08
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Extremely slow connection to Fedex.com
http://www.ISAserver.org
-------------------------------------------------------
OK, first a clarification on the captures. In both FF and IE, first went to
fedex.com and waited for page to load fully. Then typed in a dummy tracking
number consisting of a bunch of ones and then clicked on track. As such, the
tracking number requested may not have been the same for both, but either way
fedex.com will return a invalid tracking number message.
As for FF stopping short of where IE stopped, I think that is reversed. I had
waited for FF to completely finish and then stopped the capture. When IE
finally displayed the tracking number information, I did not notice it was
still waiting for items and had stopped the capture. When I stopped the
capture, I then noticed it still said 6 items waiting to load. I thought about
and decided against going back and starting over to create a new capture.
Now for the testing results after changing to user HTTP 1.1 through proxy.
(Was not checked.)
I checked the box for HTTP 1.1 through proxy, cleared the cache, closed all IE
browsers and tried again. At first, no change. Then I spent time going through
all the settings of IE and FF (since I know nothing about FF) and could not
find where in FF to change the cache settings to every visit of the page, the
same way I have IE set. (To solve other problems a few years
ago.) So I changed in IE cache settings from every visit to automatically and
tried again. It worked. What? I changed it back to every visit, no go.
Changed it back to automatic, it worked. OK, lets try this, unchecked the box
use HTTP 1.1 through proxy, no go. Checked the box again, worked.
Went to another workstation and change the cache settings to auto and use HTTP
1.1 through proxy, it worked. Unchecked the HTTP 1.1 proxy box, no go.
Rechecked it, changed cache settings from auto back to every visit, no go.
Left the box for HTTP 1.1 through proxy and changed cache settings to every
visit, works.
SO, I had to set the IE cache settings to automatic AND checked the box for
HTTP 1.1 through proxy to get it to work.
So, thanks go to the honorable Jim for his time and effort and for pointing me
in the right direction of how to resolve.
John T
eServices For You
"Life is a succession of lessons which must be lived to be understood."
Ralph Waldo Emerson (1802-1882)
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of
> Jim Harrison
> Sent: Friday, November 17, 2006 12:33 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Extremely slow connection to Fedex.com
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Unfortunately, those captures don't cover the same behavior.
> The FF capture stops short of the remaining content that the IE cap shows.
> Each example uses a different tracking request, so that makes them
> more
difficult to
> compare.
>
> FF is using Kerberos proxy auth, where IE is using NTLM. Both are
connection-based
> authentication mechanisms, so auth is only required once per
> connection
(unless the
> Kerb ticket expires).
>
> IE is making HTTP/1.0 requests, FF is making HTTP/1.1. Check the IE
Advanced
> settings to ensure that "use HTTP 1.1" and "use HTTP 1.1 through proxies"
are both
> selected.
>
> In each case, the process moves smoothly until the response for
> http://ehg.fedex.com/HG is received.
> IE cap frame 264
> FF cap frame 145
> This is where the tracking requests differ, BTW.
>
> In both cases, ~5 seconds elapses before another request is made as HTTP:
Request,
> "POST http://www.fedex.com/Tracking"; (user delay?).
> IE cap frame 272
> FF cap frame 158
> ..this response is received almost immediately
>
> Unfortunately, this is also where the FF and IE captures diverge.
> IE continues to make more requests to fedex, but FF only makes another
request to
> http://ehg.fedex.com/HG and here the FF capture stops. Note that IE
> never
makes
> any such request again.
>
> The IE cap continues normally until frame 348, where it makes a
> request
for
>
http://www.fedex.com/templates/components/javascript/us/rollover/tbrowser_ie
.js.
> The response for this request is not received by the test host until
> ~39
seconds later
> in frame 478.
>
> Another delayed response occurs for the request in frame 506, where IE
completed
> the authentication for
> http://www.fedex.com/images/ascend/rollovers/icon_lock_off.gif. The "304"
> response isn't received for ~30 seconds in frame 591.
>
> Another delay occurs between the request for URI:
> http://www.fedex.com/images/ascend/rollovers/icon_lock_on.gif in frame
508. This
> response isn't received until ~36 seconds later in frame 666
> (appropriate,
wouldn't ya
> say?).
>
> This behavior pretty much continues all the way through the remainder
> of
the
> capture.
>
> Try setting IE to use HTTP/1.1, clear the IE cache and see if things
change.
>
> -------------------------------------------------------
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/Jim_Harrison/
> http://isatools.org
> Read the help / books / articles!
> -------------------------------------------------------
>
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of
> John T (Lists)
> Sent: Friday, November 17, 2006 08:01
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Extremely slow connection to Fedex.com
>
> Attached are the 2 cab files from NetMon3 Beta 2. Both from the
workstation only
> going to Fedex.com one using IE the other using Firefox.
>
> John T
> eServices For You
>
> "Life is a succession of lessons which must be lived to be understood."
> Ralph Waldo Emerson (1802-1882)
>
>
>
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of
> > Jim Harrison
> > Sent: Friday, November 17, 2006 6:58 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Extremely slow connection to Fedex.com
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Got craptures?
> > With that, you can determine if the "slowness" is from the upstream
> > server, ISA or the client's rendering.
> >
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of John T (Lists)
> > Sent: Friday, November 17, 2006 6:49 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Extremely slow connection to Fedex.com
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Any body?
> >
> > John T
> > eServices For You
> >
> > "Life is a succession of lessons which must be lived to be understood."
> > Ralph Waldo Emerson (1802-1882)
> >
> >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx
> > > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of
> > > John T (Lists)
> > > Sent: Thursday, November 16, 2006 2:28 PM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] Extremely slow connection to Fedex.com
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > I have a client running Windows XP Pro SP2 on the workstations
> > > behind ISA
> > > 2004 on Windows Server 2003 SP1 with Burstek and GFI WebMonitor.
> > > IE is
> >
> > > set to send to ISA on port 8080 and the firewall client is installed.
> > > Number
> > of
> > > concurrent connections is not being limited by ISA.
> > >
> > > Beginning Monday, they are having problems accessing FedEx.com in
> > > that
> >
> > > it takes minutes to load, then minutes for it to return tracking
> > > status. The logged on user does not matter, as I have reproduced
> > > it with my
> > credentials
> > > and having domain admin rights. In ISA, on the Internal network
> > > web proxy tab authentication, all users must authenticate is
> > > checked but even when I unchecked no change. I also tried
> > > disabling the firewall client on the workstation and no change.
> > >
> > > As far as I can tell and what I have been told, all other sites
> > > are
> > working
> > > as expected and FedEx.com was working fine last week. I have not
> > > made any configuration changes in ISA in over 2 weeks.
> > >
> > > Now, here is an interesting part: There is one workstation that is
> > > used
> > for
> > > testing and is available for some one to use if needed. That
> > > computer also has Firefox 1.5.0.7 on it for testing the client's
> > > website. If I got to FedEx.com using Firefox, it works fine,
> > > including
tracking.
> > >
> > > I am pulling my hair on this one and am looking for
> > > suggestions/ideas to resolve it.
> > >
> > > John T
> > > eServices For You
> > >
> > > "Life is a succession of lessons which must be lived to be
> > understood."
> > > Ralph Waldo Emerson (1802-1882)
> > >
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> > All mail to and from this domain is GFI-scanned.
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
