The file is damaged and could not be repaired opening pdf file

Have you applied any specific configuration, iRule, HTTP compression/optimization, security profile?

yes. we have an irule that logs records for certain request/responses that match a rewrite.

Okay, but do you have anything custom specified in your HTTP profile, a web acceleration/caching/compression profile applied? Does your iRule write to the payload, or just log? Can you spin up a client side inspection tool like Fiddler or HTTPWatch and look at the pdf that's returned? Is it the right size? Is it the correct mime type?

thanks. this is a virtual proxy with only LTM, no security profile. also, we are opening a pdf file served up from iis 6.0/windows 2003 server. all looks same on fiddler, except the content-lengths are different.

on the LTM... compression is enabled by default. ram cache is disabled. we have a stream profile under an iRules resource. when i remove this stream, the pdf gets served up. content-length is same as when served up from iis server.

I am concentrating on this stream profile. the iRule does write to the payload.

Stream Profile Pekin_Partners_Dev_Stream iRules

Ah, so the stream profile is breaking it? Can you elaborate on how you have that configured?

iRule: when HTTP_REQUEST { set LogString_L1 "Client [IP::client_addr]:[TCP::client_port] URL: [HTTP::host][HTTP::uri]" STREAM::disable } when HTTP_RESPONSE { set LogString_L2 "$LogString_L1 - status: [HTTP::status]" STREAM::enable } when STREAM_MATCHED { log -noname 192.168.222.63 local7.debug "INTERNAL FOUND STREAM MATCH '[STREAM::match]' originating from $LogString_L2" }

Stream: @https://pinet.pekininsurance.us@http://pidev.pekininsurance.com@ @https://12.179.10.177@http://pidev.pekininsurance.com@ @https://pimodel.pekininsurance.us@http://pidev.pekininsurance.com@ @https://deviis01@http://pidev.pekininsurance.com@ @https://DEVIIS01@http://pidev.pekininsurance.com@ @https://www.pekininsurance.us@http://tlpar.pekininsurance.com:8085@ @https://12.30.140.250@http://tlpar.pekininsurance.com:8085@ @https://www.pekininsurance.us:8095@http://tlpar.pekininsurance.com:8085@ @https://12.30.140.250:8095@http://tlpar.pekininsurance.com:8085@ @https://10.2.1.1:8085@http://tlpar.pekininsurance.com:8085@ @https://10.2.1.3:8085@http://tlpar.pekininsurance.com:8085@ @https://12.30.143.55:8095@http://tlpar.pekininsurance.com:8085@ @www.pekininsurance.us:8095@tlpar.pekininsurance.com:8085@ @12.30.140.250:8095@tlpar.pekininsurance.com:8085@ @10.2.1.1:8085@tlpar.pekininsurance.com:8085@ @10.2.1.3:8085@tlpar.pekininsurance.com:8085@ @12.30.143.55:8095@tlpar.pekininsurance.com:8085@ @pinet.pekininsurance.us@pidev.pekininsurance.com@ @12.179.10.177@pidev.pekininsurance.com@ @pimodel.pekininsurance.us@pidev.pekininsurance.com@ @deviis01@pidev.pekininsurance.com@ @DEVIIS01@pidev.pekininsurance.com@ @www.pekininsurance.us@tlpar.pekininsurance.com:8085@ @12.30.140.250@tlpar.pekininsurance.com:8085@ @10.2.1.1@tlpar.pekininsurance.com:8085@ @10.2.1.3@tlpar.pekininsurance.com:8085@ @12.30.143.55@tlpar.pekininsurance.com:8085@ @pinet.pekininsurance.us@pidev.pekininsurance.com@ @12.179.10.177@pidev.pekininsurance.com@ @pimodel.pekininsurance.us@pidev.pekininsurance.com@ @deviis01@pidev.pekininsurance.com@ @DEVIIS01@pidev.pekininsurance.com@ @test.pekininsurance.com:8085@tlpar.pekininsurance.com:8085@ @test.pekininsurance.com@tlpar.pekininsurance.com:8085@ @prod.pekininsurance.com:8085@tlpar.pekininsurance.com:8085@ @prod.pekininsurance.com@tlpar.pekininsurance.com:8085@

Try this:

when HTTP_REQUEST { 
    set LogString_L1 "Client [IP::client_addr]:[TCP::client_port] URL: [HTTP::host][HTTP::uri]" 
    STREAM::disable 
} 
when HTTP_RESPONSE {
    if { [HTTP::header Content-Type] contains "text" } {
        set LogString_L2 "$LogString_L1 - status: [HTTP::status]" 
        STREAM::enable
    }
} 
when STREAM_MATCHED { 
    log -noname 192.168.222.63 local7.debug "INTERNAL FOUND STREAM MATCH '[STREAM::match]' originating from $LogString_L2" 
}

Got the following windows error pop-up

A network error occurred while accessing the document on the Internet. Would you like to close the document or reload it?

Does it still work if you turn off the STREAM profile? Let's try some additional logging:

when HTTP_REQUEST { 
    set LogString_L1 "Client [IP::client_addr]:[TCP::client_port] URL: [HTTP::host][HTTP::uri]" 
    STREAM::disable 
} 
when HTTP_RESPONSE {
    log -noname 192.168.222.63 local7.debug "Content-Type = [HTTP::header Content-Type]"
    if { [HTTP::header Content-Type] contains "text" } {
        set LogString_L2 "$LogString_L1 - status: [HTTP::status]" 
        STREAM::enable
    }
} 
when STREAM_MATCHED { 
    log -noname 192.168.222.63 local7.debug "INTERNAL FOUND STREAM MATCH '[STREAM::match]' originating from $LogString_L2" 
}

2014-05-22 13:04:51Local7.Debug192.168.222.62tmm[4897]: Content-Type = text/html; charset=utf-8 2014-05-22 13:04:52Local7.Debug192.168.222.62tmm[4897]: Content-Type = text/html; charset=utf-8 2014-05-22 13:04:52Local7.Debug192.168.222.62tmm[4897]: Content-Type = text/css 2014-05-22 13:04:52Local7.Debug192.168.222.62tmm[4897]: Content-Type = application/x-javascript 2014-05-22 13:04:52Local7.Debug192.168.222.62tmm[4897]: Content-Type = application/x-javascript 2014-05-22 13:04:52Local7.Debug192.168.222.62tmm[4897]: Content-Type = image/gif 2014-05-22 13:04:52Local7.Debug192.168.222.62tmm[4897]: Content-Type = image/jpeg 2014-05-22 13:04:52Local7.Debug192.168.222.62tmm[4897]: Content-Type = application/x-javascript 2014-05-22 13:04:52Local7.Debug192.168.222.62tmm[4897]: Content-Type = image/gif 2014-05-22 13:04:58Local7.Debug192.168.222.62tmm[4897]: Content-Type = application/pdf