[squid-users] TCP_TUNNEL_ABORTED/200?

Wed Aug 31 08:20:10 UTC 2016

One of our users is trying to connect to somw windows remoteapps via
out squid proxy.

Logging in does seem to work, but somewhere along the line, the user
is getting error messages. In our logs we're seeing the encrypted
traffic (TCP_TUNNEL/200 CONNECT remoteapps.eortc.be:443), but then
we're getting "TCP_TUNNEL_ABORTED/200" messages

I can't find anything on what exactly would cause a
"TCP_TUNNEL_ABORTED/200"

Wed Aug 31 09:33:15 2016 000330 10.39.80.171 TCP_TUNNEL/200 3177 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18724
Wed Aug 31 09:35:15 2016 120329 10.39.80.171 TCP_TUNNEL_ABORTED/200 730 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18728
Wed Aug 31 09:35:15 2016 120330 10.39.80.171 TCP_TUNNEL_ABORTED/200 778 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18726
Wed Aug 31 09:35:15 2016 120531 10.39.80.171 TCP_TUNNEL_ABORTED/200 97549 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18704
Wed Aug 31 09:35:15 2016 120520 10.39.80.171 TCP_TUNNEL_ABORTED/200 35620 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18716
Wed Aug 31 09:35:15 2016 120530 10.39.80.171 TCP_TUNNEL_ABORTED/200 21295 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18706
Wed Aug 31 09:35:15 2016 120530 10.39.80.171 TCP_TUNNEL_ABORTED/200 4607 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18708
Wed Aug 31 09:35:15 2016 121397 10.39.80.171 TCP_TUNNEL_ABORTED/200 63224 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18622
Wed Aug 31 09:35:15 2016 120531 10.39.80.171 TCP_TUNNEL_ABORTED/200 8175 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18710
Wed Aug 31 09:35:15 2016 120530 10.39.80.171 TCP_TUNNEL_ABORTED/200 5663 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18712
Wed Aug 31 09:35:15 2016 120529 10.39.80.171 TCP_TUNNEL_ABORTED/200 4575 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 18714
Wed Aug 31 09:40:17 2016 000623 10.39.80.171 TCP_TUNNEL/200 5737 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40220
Wed Aug 31 09:40:25 2016 008522 10.39.80.171 TCP_TUNNEL_ABORTED/200 12575 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40222
Wed Aug 31 09:41:35 2016 079147 10.39.80.171 TCP_TUNNEL/200 13785 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40216
Wed Aug 31 09:41:35 2016 079143 10.39.80.171 TCP_TUNNEL/200 1050 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40224
Wed Aug 31 09:41:35 2016 079137 10.39.80.171 TCP_TUNNEL/200 1050 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40226
Wed Aug 31 09:41:35 2016 079148 10.39.80.171 TCP_TUNNEL/200 3359 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40218
Wed Aug 31 09:41:35 2016 079443 10.39.80.171 TCP_TUNNEL/200 6190 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40120
Wed Aug 31 09:41:35 2016 081507 10.39.80.171 TCP_TUNNEL/200 108336 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 39584
Wed Aug 31 09:41:35 2016 079441 10.39.80.171 TCP_TUNNEL/200 6222 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40122
Wed Aug 31 09:41:35 2016 079440 10.39.80.171 TCP_TUNNEL/200 5214 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40126
Wed Aug 31 09:41:35 2016 079440 10.39.80.171 TCP_TUNNEL/200 5956 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40128
Wed Aug 31 09:41:35 2016 079442 10.39.80.171 TCP_TUNNEL/200 3508 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40124
Wed Aug 31 09:42:39 2016 064005 10.39.80.171 TCP_TUNNEL/200 10591 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 54632
Wed Aug 31 09:43:51 2016 071666 10.39.80.171 TCP_TUNNEL/200 101799 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 10486
Wed Aug 31 09:44:41 2016 000429 10.39.80.171 TCP_TUNNEL/200 5621 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 32494
Wed Aug 31 09:45:29 2016 000406 10.39.80.171 TCP_TUNNEL/200 5621 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 40374
Wed Aug 31 09:46:10 2016 138175 10.39.80.171 TCP_TUNNEL_ABORTED/200 121039 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24594
Wed Aug 31 09:46:10 2016 138416 10.39.80.171 TCP_TUNNEL_ABORTED/200 13286 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24538
Wed Aug 31 09:46:10 2016 138415 10.39.80.171 TCP_TUNNEL_ABORTED/200 8791 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24544
Wed Aug 31 09:46:10 2016 139221 10.39.80.171 TCP_TUNNEL_ABORTED/200 118413 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24388
Wed Aug 31 09:46:10 2016 138178 10.39.80.171 TCP_TUNNEL_ABORTED/200 10392 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24590
Wed Aug 31 09:46:10 2016 138177 10.39.80.171 TCP_TUNNEL_ABORTED/200 10764 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24592
Wed Aug 31 09:46:10 2016 138414 10.39.80.171 TCP_TUNNEL_ABORTED/200 11425 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24546
Wed Aug 31 09:46:10 2016 138416 10.39.80.171 TCP_TUNNEL_ABORTED/200 9879 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24542
Wed Aug 31 09:46:10 2016 138181 10.39.80.171 TCP_TUNNEL_ABORTED/200 26016 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24588
Wed Aug 31 09:46:10 2016 138185 10.39.80.171 TCP_TUNNEL_ABORTED/200 114372 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24586
Wed Aug 31 09:46:10 2016 138187 10.39.80.171 TCP_TUNNEL_ABORTED/200 10455 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24584
Wed Aug 31 09:46:10 2016 138419 10.39.80.171 TCP_TUNNEL_ABORTED/200 13697 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 24540
Wed Aug 31 09:59:48 2016 000465 10.39.80.171 TCP_TUNNEL/200 54536 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41176
Wed Aug 31 09:59:54 2016 006016 10.39.80.171 TCP_TUNNEL/200 112172 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41230
Wed Aug 31 10:00:25 2016 030812 10.39.80.171 TCP_TUNNEL/200 18483 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41696
Wed Aug 31 10:02:22 2016 147993 10.39.80.171 TCP_TUNNEL/200 1540 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41694
Wed Aug 31 10:02:22 2016 154295 10.39.80.171 TCP_TUNNEL/200 5192 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41198
Wed Aug 31 10:02:22 2016 154301 10.39.80.171 TCP_TUNNEL/200 11304 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41190
Wed Aug 31 10:02:22 2016 154079 10.39.80.171 TCP_TUNNEL/200 7592 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41224
Wed Aug 31 10:02:22 2016 154078 10.39.80.171 TCP_TUNNEL/200 3491 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41226
Wed Aug 31 10:02:22 2016 154297 10.39.80.171 TCP_TUNNEL/200 5096 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41194
Wed Aug 31 10:02:22 2016 154303 10.39.80.171 TCP_TUNNEL/200 25293 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41188
Wed Aug 31 10:02:22 2016 154297 10.39.80.171 TCP_TUNNEL/200 6317 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41196
Wed Aug 31 10:02:22 2016 154300 10.39.80.171 TCP_TUNNEL/200 3491 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41192
Wed Aug 31 10:02:22 2016 154079 10.39.80.171 TCP_TUNNEL/200 9875 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41228
Wed Aug 31 10:02:22 2016 154296 10.39.80.171 TCP_TUNNEL/200 4963 CONNECT remoteapps.eortc.be:443 - HIER_DIRECT/193.9.9.153 - 41200

-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
ralf.hildebrandt at charite.de        Campus Benjamin Franklin
http://www.charite.de              Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155