Forum Discussion

Zdenda's avatar
Zdenda
Icon for Cirrus rankCirrus
Feb 17, 2012

HTTP monitor with used domain name

Hi there,

 

I have to use HTTP monitor which will contain URL and URI and is expecting OK reply.

 

I am using BIGIP 10.2.3 and my HTTP monitor send string is now like this:

 

 

GET /web/default.aspx HTTP/1.1\r\nHost: tested.domain.com\r\nConnection: Close\r\n\r\n

 

 

But currently this is not working and I cannot find whats wrong, does anybody know whats wrong?

 

 

Thanks,

 

Zdenek

 

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Can you

     

     

    1. Post the config for the monitor

     

    2. Do a tcpdump and view the stream (To a dump file via -w and use wireshark to get the data)

     

    3. Have a look at the web serve access and error logs for any status returns and errors

     

     

    H
  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Can you

     

     

    1. Post the config for the monitor

     

    2. Do a tcpdump an viewvthe stream

     

    3. Hav a look at e web serve access log for any errors

     

     

    H
  • Hi, thanks, here it is

     

     

    1)

     

    monitor my_http_monitor {

     

    defaults from http

     

    partition Intranet

     

    recv "OK"

     

    send "GET /atest/web/default.aspx HTTP/1.1\r\n Host: myprivatesite.biz\r\n Connection: close\r\n\r\n\"

     

    }

     

     

     

    2) I have gone through tcpdump:

     

     

    Requests are like this:

     

    Expert Info (Chat/Sequence): GET /atest/web/default.aspx HTTP/1.1\r\n

     

     

    Response:

     

    Expert Info (Chat/Sequence): HTTP/1.1 400 Bad Request\r\n

     

     

    I think those are most important from dump?

     

     

     

    3) I will ask resp. people for that server.

     

     

     

     

    Thanks,

     

    Zdenek

     

  • send "GET /atest/web/default.aspx HTTP/1.1\r\n Host: myprivatesite.biz\r\n Connection: close\r\n\r\n\"is the last back slash (\) excess?
  • Hi, yes it's typo. That slash is out and situation still the same.

     

    I get 400 The request is badly formed.

     

     

    I have compared TCPdump when it works from IE and TCPdump when monitor from F5 and those are same, but wireshark doesnt show me everything..

     

  • have you tried to telnet to pool member and send a request?

     

     

    GET /atest/web/default.aspx HTTP/1.1

     

    Host: myprivatesite.biz

     

    Connection: close
  • I tried to telnet to member and paste my command with \r\n. It didnt work.

     

     

    Now I tried your template and I got 401 unauthorized, so there is some progress:-)

     

    But why it didnt work with \r\n ?

     

     

    Z

     

  • But why it didnt work with \r\n ?since you have to press enter key, you do not need to put \r\n.

     

     

    Now I tried your template and I got 401 unauthorized, so there is some progress:-)does web server require authentication? if so, what is authentication method?

     

     

    this sol also includes send string with basic authentication.

     

     

    sol2167: Constructing HTTP requests for use with the HTTP or HTTPS application health monitor

     

    http://support.f5.com/kb/en-us/solutions/public/2000/100/sol2167.html

     

     

    hope this helps.
  • Hmm, I have to find out why IIS doesnt accept requests with \r\n and then I will try to solve that authentication issue. I am quite lost at the moment, I tried many shapes of requests but still get the same: Error 400. The request is badly formed

     

  • what i think is your web server requires authentication and OK will be received if authentication successes.

     

     

    by the way, Aaron has written very good health monitor troubleshooting guide as follows.

     

     

    Troubleshooting Ltm Monitors by Aaron

     

    http://devcentral.f5.com/wiki/AdvDesignConfig.TroubleshootingLtmMonitors.ashx

     

     

    hope this helps.