Forum Discussion

draco's avatar
draco
Icon for Nimbostratus rankNimbostratus
Jun 10, 2018

Unparsable request content

Hi

For some traffic to an application, ASM is giving Unparsable request content and details as below :-

Request Content-Length: 1334652 differs from actual request body length: 1163264

I dont see anywhere in the system variable section where the lenght is 1163264 , what is this length ?

I checked in other posts , it is told to increase the ecard_max_http_req_uri_len but for this case , does this variable apply ?

The whole POST Request is as below :- 

POST /TransmittalList.aspx HTTP/1.1
Host: ccvvv
Connection: keep-alive
Content-Length: 1334652
Cache-Control: no-cache
Origin: [http://edrms.astad.qa](http://edrms.astad.qa)
X-Requested-With: XMLHttpRequest
X-MicrosoftAjax: Delta=true
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like
Gecko) Chrome/58.0.3029.81 Safari/537.36
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept: */*
Referer: [http://ccvvvv/TransmittalList.aspx](http://ccvvv/TransmittalList.aspx)
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.8
Cookie: intercom-id-fgu4ez28=953f9264-ffdf-4791-b49b-d7b9fb3eb25d;
_ga=GA1.2.903167723.1503917102; intercom-lou-fgu4ez28=1;
ASP.NET_SessionId=uhzqygn41hxewpn0bmmvzyyd;
TS017bda1c=01a978a1111da25be5127f0362e403165d369173224e3e1314f8485d0343ecd9ef4ebba70e05d
c630c1df6415a58ba56ea25ed8230
ctl00%24masterScriptManager=ctl00%24MainContent%24ctl00%24MainContent%24RadAjaxPanel1Pan
el%7Cctl00%24MainContent%24btnTransmittalSearchOnly&__EVENTTARGET=ctl00%24MainContent%24
btnTransmittalSearchOnly&__EVENTARGUMENT=&__LASTFOCUS=&__VIEWSTATE=VzSfePPLsmpwkxCoxT%2F
%2BZ%2BFwsl%2ByF4yKh3PYY7WHdqnQThdR%2FAvKmDrBYa55Ikd23MQn8AKEEzwfgxGg3HNDEzamS2CBDUzZhw%
2FHnXO0qAfvqbz2mxsODOr%2F%2BVh919oT5vpRP1xOut7IUbkbieOlMX%2F6aiBNbpTLxqgGpjwP68v90ZVIwA4
7MbVb0Gm%2FymNaQaGYsK%2F49bI3LsH240aTibZrgyG8NZ%2BWhqj8pNY4VfDOpg%2FTQVYaO4eI1frpQQnlA4m
5rSeqItonhbvt%2BECNF216ztIZWybYfffR3Q0NRHacc0Z0lPFLYhat3wkmiVvVgw%2FevTiE6Pstp009VNtQg%2
B2KTkY1BOnUNLGfCg9Y%2F0Du45mtD%2B3GHDicnWeu4%2FR9%2FWiijBz2rrzpUjK8bL1qNeHep8qVncIi4%2FI
BTndrA8fiHIXs3Td2YUtfJdRrmpncEdpKNHk4vtTMb38rMqsLAleEIiG6Kg5orKCwTC8sct88QuF2b7VRU2ULMQ2
90CDyUfznCbjScFwROuprAsLFDAe4MqNFyi71gDjePeuWIlAlmSmpZgPOg0B%2FemzTnnxz8mY%2F6x3u%2F08hi
mIe%2BdLn1u3Iu8pMBpUobMVoPIv6d7vFZhqYe0kU6DCryi8mkPMUKPrnP7tEUPGAifU8%2F8chay8gw%2Fm2lSd
q7OsmN4gC%2F5b6HwbC3YEvUvkuOm5sp8WNi2DUjhhZxLRpS%2FVREozuBWUbqt%2FqsPEZ4xaLg645r89IDU1Nb
Yqwmk9fyx6ICVcC5FnRbue7cj6KAffic7QLooAvpRCTrQhV3K2JgI8EtePmCH6KHOvHfTVh%2F0FZzTq2n7%2BB7
egsggFPt1rUbnzH4VHPxQkohw6bu2N%2BFo10eZJmAjA3byIr73yTF7dKLMm3NPq8sljprEArY7AmETS3OWot%2B
cmf4S3ucoHez69N9zhR88THL8tNer2S8HmKXx6sxIXmgFM3CQlfxqri%2Foi8hXJl7lxUovO99GrLmCRc5%2Bpr6
KfP3UZe0ad4C9NYiFSJChosgkDUDv98nO3aLmZ4Z62Pvr%2FUo82TLcqsqXYc2icKkeChL7pUJGmD0tRFtHDK49t

Do help me out .

application delivery
ASM Advanced WAF
BIG-IP
security
  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Jun 10, 2018

    Your HTTP request specifies that the Content-Length of the POST body is 1334652 bytes

    POST /TransmittalList.aspx HTTP/1.1  
Host: ccvvv  
Connection: keep-alive
Content-Length: 1334652
...

    The actual length of the POST body is only 1163264 bytes (as determined by the HTTP parser seeing two Carriage return/Line feed combinations in the datastream)

    \r\n\r\n

    This is an HTTP violation, and there is something incorrect (either the calculation of the Content-Length header, or in the body of the POST).