Microsoft KB Archive/921363

= Data that is contained in the Filter Information column may be truncated when you turn on HTTP Compression in the Microsoft Internet Security and Acceleration Server 2004 log viewer =

Article ID: 921363

Article Last Modified on 2/9/2007

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server Enterprise Edition Service Pack 2
 * Microsoft Internet Security and Acceleration Server 2004 Standard Edition Service Pack 2

-



SYMPTOMS
You install or upgrade to Microsoft Internet Security and Acceleration Server (ISA) 2004, and you turn on HTTP Compression.

When you view the Logging tab in the ISA Administrator Console, the data that is contained in the Filter Information column for the HTTP Protocol may be missing characters, or the text may be truncated. For example, when you turn on HTTP compression, the data in the Filter Information column for the HTTP Protocol may resemble the following: Compression: client=No, server=Yes, cache=Yes, compress rate=0% decompress rate=242% ; Blocked by the HTTP Security filter: URL co



CAUSE
This problem occurs because the Filter Information column for the HTTP protocol is limited to 128 characters. This 128-character limit includes spaces. When you turn on HTTP Compression, the Filter Information column may contain more than 128 characters. Therefore, some data may be truncated or have missing characters.



RESOLUTION
To resolve this problem, install the hotfix that is mentioned in the following Knowledge Base article:

921937 Description of the ISA Server 2004 hotfix package: July 6, 2006

After you install this hotfix, the data that is contained in the Filter Information column is reduced. 

MORE INFORMATION
When HTTP Compression is used, the Filter Information column in the ISA log viewer results may resemble the following example: Compression:c=N,s=Y,cache=N,cRate=0%,dRate=242%
 * c = Y (Client = Yes): The client asked for a compressed response.
 * c = N (Client = No): The client did not ask for a compressed response.
 * s = Y (Server = Yes): The ISA server asked the Web server for a compressed response.
 * s = N (Server = No): The ISA server did not ask the Web server for a compressed response.
 * cache = Y (cache = Yes): The compressed page was fetched from the cache.
 * cache = N (cache = No): The compressed page was not fetched from the cache.
 * cRate (Compression Rate): This field displays the compression rate information when the ISA server sends a compressed response. The cRate is 0 when the response is already compressed or when the ISA server does not compress the response.
 * dRate (Decompression Rate): This field displays the decompression rate. The ISA server decompresses the response when the response is compressed, and ISA is required to inspect the content. Additionally, the ISA server decompresses the response when the client does not request compression.

Keywords: kbqfe kbprb KB921363

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.