Koozali.org: home of the SME Server

[Errno -1] Header is not complete

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: [Errno -1] Header is not complete
« Reply #30 on: May 28, 2009, 09:29:14 PM »
You think??
I do as well, as all filenames over a certain length are truncated (this has been default behavior for yum as long as I know on SME Server) and on top of that is also the case with yum installations that do work as Charlie showed in an earlier post.

Please stop bashing on saying that MTU header dropping would cause those symptoms, there obviously is something wrong as the user has a problem and it might be MTU settings (for all I know), but I find it hard to believe that the truncation of file names would be the symptoms for such a problem.
« Last Edit: May 28, 2009, 09:30:55 PM by cactus »
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)

Offline byte

  • *
  • 2,183
  • +2/-0
Re: [Errno -1] Header is not complete
« Reply #31 on: May 28, 2009, 11:08:11 PM »
If we had that rpm, it would mdsum bad.

I already know it will.

I didn't ask for a mdsum because it's a PITA and I already know it's bad.

If it was a bad mdsum/checksum you would get a completely different yum error message.

Please also stick to the topic in question as it doesn't help the OP.  Thanks
--[byte]--

Have you filled in a Bug Report over @ http://bugs.contribs.org ? Please don't wait to be told this way you help us to help you/others - Thanks!

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: [Errno -1] Header is not complete
« Reply #32 on: May 29, 2009, 01:00:31 AM »
I do as well, as all filenames over a certain length are truncated (this has been default behavior for yum as long as I know on SME Server)
Sure will, but that's something different.

Quote
and on top of that is also the case with yum installations that do work as Charlie showed in an earlier post.

Yum works for me and everyone else, doesn't work in this case and another current case.

By no means am I saying yum is the issue, it's not.

Quote
Please stop bashing on saying that MTU header dropping would cause those symptoms,

I'm not bashing anyone or thing, and please don't don't make that accusation, it's getting old dude.
Simply understand my posts.
Yea I know that's hard, more patients/effort...

Quote
there obviously is something wrong as the user has a problem and it might be MTU settings (for all I know),
Well JFYI the OP has confirmed MTU settings and diagnostics, which appear to be alright Wan Firewall to Wan Firewall.

That still leaves what's behind each firewall doesn't it.

Quote
but I find it hard to believe that the truncation of file names would be the symptoms for such a problem.

I don't, it's a packet problem for sure and what kind of things cause packet issues.

Pick anything from the network universe as a possible cause, I won't argue with you, that's for sure.

It can be anything, I know it's not yum.

So where do you start, MTU is a good start, oh well some things look pretty good.

Did it tell us everything about everything, no...but a good start.

What do you suggest?

My next suggestion was to Gateway SME to the modem and verify SME to the world.

If SME works, then we're back to internal network packets.

And what are the chances of that.

Yea I'd say, I agree with you...

But then again it doesn't do much good looking on this (LAN) side of the fence, if the issue is on the other side (www) with SME.

Gateway Mode direct to modem....can eliminate that possibility from the universe.

If it was a bad mdsum/checksum you would get a completely different yum error message.

And how?

If you program it into the socket, but that wasn't done with yum.

Sock's is a low level raw packet transporter, how fancy depends on your programming effort.

Yum doesn't  mdsum or checksum.

Raw packet transporter....yum.

Another method is you can put the mdsum into the header, the facility is there already.

Then when it's received the sock pulls it from the header and your program can automatically mdsum.
But nobody does that, you get the mdsum in a second txt file don't you.

The EL Manual mdsum procedure. My thumb is down.

I played with that mdsum in the header, works a treat, however this boy isn't to make the WWW embed the mdsum.

Work around code, d/l file.exe and sum.txt and auto mdsum. Thumb starts to go up.

What yum does do however is what it's doing here in this case.

It is detecting bad packets, and preventing the d/l.

With yum.... it's feed me good packets or forget it.

Ok that's not optimal I agree, but it works for me, I think it works for you, as well as everyone else.

Or would you rather it ate your bad packets and made a file for you anyway.

Yum works a treat at this point.

If it ain't broke don't fix it.

Fact is when was the last time you told someone to mdsum all the files in SME's update?

Never?

Na...we don't want that, do we...!!!

Would be nice if yum told you exactly what the problem was with your packets and thus your network.

However, I do think that's a few versions into the future.

OR Never is more like it.

BTW did you both goto Caio's link and read that fix?

He could have narrowed down "fix your network" somewhat though.
 
Quote
Please also stick to the topic in question as it doesn't help the OP.  Thanks

Likewise gents.

May your packets always be good ones.....later.

Offline jeff.p

  • **
  • 23
  • +0/-0
Re: [Errno -1] Header is not complete
« Reply #33 on: May 29, 2009, 02:58:41 AM »
Im sorry i caused all this angst.  I took the sme server practice machine i built home and plugged it into my home network. yum update worked perfectly downloaded 90 odd update and installed them. So yum is not the problem. Our SME has to go through a number of switches, routers, firewalls and such to get to the www. It worked fine in the past so something in the past 4 or 5 weeks has changed.
The fact that it worked from my home means that we have to now look at the switches and routers that are in place.
I would like to thank you all for your help with narrowing down where the problem lies and when i find out the reason for the issue i will post it here so we can all become more knowledgeable about SME. 
Thanks again.

Jeff

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: [Errno -1] Header is not complete
« Reply #34 on: May 29, 2009, 03:38:27 AM »
Im sorry i caused all this angst.

You didn't.

If you have any problems in the future, please report them via the Bug Tracker.

Offline jeff.p

  • **
  • 23
  • +0/-0
Re: [Errno -1] Header is not complete
« Reply #35 on: June 03, 2009, 04:04:20 AM »
Thanks for all your help. It seems that the antivirus on a Fortigate firewall is blocking the yum process see this post http://www.centos.org/modules/newbb/viewtopic.php?topic_id=12597. We have the fortigate techos looking at the problem which they acknowledge is a known issue for yum. Hope this can solve others problems. Once again thanks for your patience in getting this solved i do appreciate it.

Jeff

Offline chris burnat

  • *****
  • 1,135
  • +2/-0
    • http://www.burnat.com
Re: [Errno -1] Header is not complete
« Reply #36 on: June 03, 2009, 09:18:35 AM »
Thanks for all your help. It seems that the antivirus on a Fortigate firewall is blocking the yum process see this post http://www.centos.org/modules/newbb/viewtopic.php?topic_id=12597. We have the fortigate techos looking at the problem which they acknowledge is a known issue for yum. Hope this can solve others problems. Once again thanks for your patience in getting this solved i do appreciate it.

Jeff

Jeff, would you have the time to fill a bug report about your findings when all is done?  You can select the documentation classification.  In this way, this issue can be added to the FAQ or wherever relevant for future reference.  Posts in the Forum tends to get lost after a while, the Wikis are more accessible.
Many thanks
- chris
If it does not work out of the box, please fill in a Bug Report @ Bugzilla (http://bugs.contribs.org)  - check: http://wiki.contribs.org/Bugzilla_Help .  Thanks.

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: [Errno -1] Header is not complete
« Reply #37 on: June 03, 2009, 10:16:27 PM »
Thanks for all your help. It seems that the antivirus on a Fortigate firewall is blocking the yum process see this post http://www.centos.org/modules/newbb/viewtopic.php?topic_id=12597. We have the fortigate techos looking at the problem which they acknowledge is a known issue for yum. Hope this can solve others problems. Once again thanks for your patience in getting this solved i do appreciate it.
Jeff

Jeff, one thing I would suggest is this, Don't hold your breath waiting for Fortigate to provide a cure.
Simply, I see no evidence it's the Fortigate, however it looks like a possible Fortigate or network config issue.

If your on a vlan network, I would be very suspect of an issue/s there, tagging issues or switch firmware.
I would look for two subnets/segments leaking to each other.

In the link you provided, the fellow that said he disabled the fortigate AV, doesn't mean there is an issue with the AV software on the FG.
Notice he didn't state that he contacted fortigate and they provided a solution.
You would think he would have made that statement if that was the issue.
Looks more like a packet issue ahead of the FG, with understanding of what firewall AV engines do, aka packet sniffers.

Good packets pass on.
Infected packets, log and  del or quarantine.
Malformed/corrupt packets, log and quarantine or log and drop, depending on severity.
You might want to look at the FRGTE AV log, might just shed some light.

AV issue only serves to add to the app list of not working apps on a network with packet issues.
Only serves to add to the packet issue concept.

Bottom line, strongly investigate your entire network for config issues.
More then likely will be fruitful.

Also is the network 100T or entirely 1000T or co-mingled???
Types of switches used, unbuffered/buffered???
Any VPN's working / in use???

Most network packet issues go seemingly unnoticed for extended periods or forever.
Depends entirely on the severity of the issue.

HTH

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: [Errno -1] Header is not complete
« Reply #38 on: July 30, 2009, 06:03:31 PM »
In this way, this issue can be added to the FAQ or wherever relevant for future reference. 

ther's also a similar issue with SonicWall UTM..

added to FAQ: http://wiki.contribs.org/SME_Server:Documentation:FAQ#General

Stefano

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: [Errno -1] Header is not complete
« Reply #39 on: July 30, 2009, 06:05:47 PM »
In this way, this issue can be added to the FAQ or wherever relevant for future reference. 

ther's also a similar issue with SonicWall UTM..

added to FAQ: http://wiki.contribs.org/SME_Server:Documentation:FAQ#General

Stefano

Offline Bert Rolston

  • *
  • 9
  • +0/-0
Re: [Errno -1] Header is not complete
« Reply #40 on: August 04, 2009, 05:49:34 AM »
I encountered the same problem while running behind an UNTANGLE firewall/proxy/UTM computer with the Open Source packages installed.

Simple solution for that was to "turn off" Virus Blocker and Spyware Blocker