Forum Discussion

Tim_Abbott_4960's avatar
Tim_Abbott_4960
Icon for Nimbostratus rankNimbostratus
Jan 21, 2006

Capture "Server Busy" Errors

Fun Seekers,

 

 

I have a web farm of 22 webservers that run an ISAPI filter called IDLE-Y. This ISAPI filter runs four instances of our applicaiton at the same time. We are having issues were one of the four applications gets housed up and stops respondng to requests and sends backa "Server Busy". I need to capture the return traffic from a web server and search for "Server Busy" in the payload, log it so I can track which server(s) are having the issue and to identify how serious this issue really is.

 

 

Where do I start?

 

 

Thanks,

 

 

Tim

 

  • I'd start with tcpdump. Once you have a capture, you can see if the message you are looking for is consistently in the same place in the packet, or if it is variable. If it is variable, try to narrow down a range within the payload.

     

     

    tcpdump -ni -w/var/tmp/yourcapfile.cap host tcp port -s0
  • It should be fairly straightforward to build an iRule that checks the server response. Search the forums for the HTTP_RESPONSE_DATA event and you should get some samples to get you going. You can also check out my blog for some spotlighted iRules that do response data inspection.

     

     

    http://devcentral.f5.com/weblogs/joe/category/27.aspx?Show=All

     

    Click here

     

     

    -Joe
  • bl0ndie_127134's avatar
    bl0ndie_127134
    Historic F5 Account
    If you are using 9.2 or greater version of the BigIP, you might also want to consider using the stream profile. Check out this posting for more details on the stream profile.

     

     

    Click here