After running with this new beta mac version (110609-0), yesterday ALL http/https connections to external servers started failing. I could still hit machines in my local LAN, but everything else started timing out.
After 5 hours of debugging & hair pulling, I disabled avast web shield and viola` everything was fine again.
Avast web shield is off for now.
Also, in an unrelated lower prio nit, avast clogs up the logs with filesystem events like:
6/9/11 7:40:53 AM kernel AvastFileShield: Req 36752: /Users/bedge/Documents/Microsoft User Data/Office 2011 Identities/Main Identity/Data Records/Message Sources/0T/0B/1M/136K/x27_1136536 (reason 0x2)
There’s no output from that command. I’ve been running with web shield disabled for the last 5 days now, so any info that was in the log has been pushed out.
However, if I look in the older logs, there is data: (Note hostname & machine name test replacements are mine to preserve ident data)
1 %> bzcat /var/log/system.log..bz2 | grep 'proxy[[0-9]]’
Jun 9 06:38:40 proxy[248]: Starting daemon.
Jun 9 06:38:40 proxy[248]: Error opening hosts file: fopen(): No such file or directory
Jun 9 07:31:45 proxy[248]: SIGTERM received. Exiting.
Jun 8 06:56:19 proxy[232]: Error connecting to server: connect(): Connection refused
Jun 8 06:56:49 proxy[232]: Error connecting to server: connect(): Connection refused
Jun 8 07:00:45 proxy[232]: Defective HTTP request!
Jun 8 07:00:45 proxy[232]: Wrong AV checkurl response code (501)!
Jun 8 07:00:45 proxy[232]: Defective HTTP request!
Jun 8 07:00:45 proxy[232]: Wrong AV checkurl response code (501)!
Jun 8 07:06:32 proxy[232]: Error reading receive buffer: read(): Connection reset by peer
Jun 8 07:07:17 proxy[232]: Error reading receive buffer: read(): Connection reset by peer
Jun 8 07:08:03 proxy[232]: Error reading receive buffer: read(): Connection reset by peer
Jun 8 07:09:06 proxy[232]: Error reading receive buffer: read(): Connection reset by peer
Jun 8 07:09:39 proxy[232]: Error reading receive buffer: read(): Connection reset by peer
Jun 8 08:16:16 proxy[232]: Error reading receive buffer: read(): Connection reset by peer
Jun 8 08:59:02 proxy[232]: Error reading receive buffer: read(): Connection reset by peer
Jun 8 11:35:52 proxy[225]: Starting daemon.
Jun 8 11:35:52 proxy[225]: Error opening hosts file: fopen(): No such file or directory
Jun 8 11:53:49 proxy[225]: Error connecting to server: connect(): Connection refused
Jun 8 11:59:26 proxy[225]: Error connecting to server: connect(): Connection refused
Jun 8 13:34:11 proxy[225]: Defective HTTP response!
Jun 8 15:01:55 proxy[225]: Error connecting to server: connect(): Operation timed out
Jun 8 15:07:12 proxy[225]: Error connecting to server: connect(): Network is unreachable
Jun 8 15:08:18 proxy[225]: Error connecting to server: connect(): Operation timed out
Jun 8 15:08:20 proxy[225]: Error connecting to server: connect(): Network is unreachable
Jun 8 15:08:20 proxy[225]: Error connecting to server: connect(): Operation timed out
Jun 8 15:36:58 proxy[225]: Starting daemon.
Jun 8 15:36:58 proxy[225]: Error opening hosts file: fopen(): No such file or directory
Jun 8 15:40:19 proxy[225]: Error reading receive buffer: read(): Connection reset by peer
Jun 8 16:06:12 proxy[178]: Starting daemon.
Jun 8 16:06:12 proxy[178]: Error opening hosts file: fopen(): No such file or directory
Jun 8 17:09:11 proxy[250]: Starting daemon.
Jun 8 17:09:11 proxy[250]: Error opening hosts file: fopen(): No such file or directory
Jun 8 17:31:45 proxy[248]: Starting daemon.
Jun 8 17:31:45 proxy[248]: Error opening hosts file: fopen(): No such file or directory
Jun 8 19:13:54 proxy[248]: Starting daemon.
Jun 8 19:13:54 proxy[248]: Error opening hosts file: fopen(): No such file or directory
Jun 8 19:18:18 proxy[248]: Starting daemon.
Jun 8 19:18:18 proxy[248]: Error opening hosts file: fopen(): No such file or directory
Jun 8 19:39:09 proxy[160]: Starting daemon.
Jun 8 19:39:09 proxy[160]: Error opening hosts file: fopen(): No such file or directory
Jun 8 19:42:15 proxy[263]: Starting daemon.
Jun 8 19:42:15 proxy[263]: Error opening hosts file: fopen(): No such file or directory
Jun 8 19:46:01 proxy[160]: Starting daemon.
Jun 8 19:46:01 proxy[160]: Error opening hosts file: fopen(): No such file or directory
Jun 8 19:50:52 proxy[248]: Starting daemon.
Jun 8 19:50:52 proxy[248]: Error opening hosts file: fopen(): No such file or directory
Jun 8 20:16:28 proxy[301]: Starting daemon.
Jun 8 20:16:28 proxy[301]: Error opening hosts file: fopen(): No such file or directory
Jun 7 01:01:34 proxy[62618]: Error connecting to server: connect(): Operation timed out
Jun 7 01:02:41 proxy[62618]: Error connecting to server: connect(): Operation timed out
Hmm, the proxy does not terminate in a proper way. Either it is killed by something, or it crashes. Are there any crash logs in /Library/Logs/CrashReporter?
Not for avast, no: (unless they expired and were deleted)
0 %> ls -l /Library/Logs/CrashReporter
total 16
lrwxr-xr-x 1 root admin 60 Jun 12 09:44 Locum_2011-06-12-094451_localhost.crash → …/DiagnosticReports/Locum_2011-06-12-094451_localhost.crash
lrwxr-xr-x 1 root admin 60 Jun 12 09:45 Locum_2011-06-12-094505_localhost.crash → …/DiagnosticReports/Locum_2011-06-12-094505_localhost.crash
Here’s one more possible clue. I’m running an ipsec vpn client that uses racoon and ipsec. The problem occurred with and without the vpn client active. Perhaps the vpn config itself, even when non-active had some effect on the avast client?
If you get this message permanent for an URL, post here the URL so we can analyze the issue. If you get it “randomly” (and not offten) it is most probable caused by an interrupted HTTP request/response and does not require any attention.
I’ve been having the same issue. I figured it was related to Avast Web Shield. I’m going to disable it for now and see if Safari works again.
Generally, Safari would accept a url, appear to be loading, but never get anywhere. If I quit Safari and opened it again, the url would load just fine. I tried simply disabling the Safari Extension, but the problem persists.
The System.log lines that led me to this thread were:
5/15/12 5:57:50.349 PM proxy: Defective HTTP request!
5/15/12 5:57:50.350 PM proxy: Unexpected AV CHECKURL response code (501)!