Hello all! I've done more tests... here are the logs with "log_mime_hdr" turned on...
I've putted the logs in an attached file... hope it help... I still having problmes with that because users still upgrading their WMP to version 9, although all the acknowledgments... Thanks to all! Regards... -----Mensagem encaminhada----- > From: Isaias - Sinosnet <[EMAIL PROTECTED]> > To: Henrik Nordstrom <[EMAIL PROTECTED]> > Cc: [EMAIL PROTECTED] > Subject: Re: [squid-users] Windows Media Player 9 problem with NTLM auth > Date: 24 Apr 2003 16:12:15 -0300 > > Here are the logs: > > Dummy account = testwmp > Domain/Workgroup = workgroup > XXX.XXX.XXX.XXX = Windows box / Client machines > YYY.YYY.YYY.YYY = Streaming server > > **************************** > Windows Media Player 7 > **************************** > 1051208584.232 21 XXX.XXX.XXX.XXX TCP_HIT/200 337 GET > http://www.siteofstream.com/audio.asx workgroup\testwmp NONE/- > video/x-ms-asf [Accept: image/gif, image/x-xbitmap, image/jpeg, > image/pjpeg, */*\r\nReferer: > http://www.siteofstream.com/principal.htm\r\nAccept-Language: > pt-br\r\nProxy-Connection: Keep-Alive\r\nUser-Agent: Mozilla/4.0 > (compatible; MSIE 5.5; Windows 98)\r\nHost: www.gruposinos.com.br\r\n] > [HTTP/1.1 200 OK\r\nServer: Microsoft-IIS/4.0\r\nConnection: > keep-alive\r\nDate: Thu, 10 Apr 2003 15:50:28 GMT\r\nContent-Type: > video/x-ms-asf\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 18 Mar > 2003 17:32:56 GMT\r\nETag: "0d4646974edc21:15047"\r\nContent-Length: > 25\r\n\r] > 1051208595.017 12 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 223 GET > http://www.siteofstream.com/audio.asx workgroup\testwmp NONE/- > video/x-ms-asf [Accept: */*\r\nUser-Agent: > Windows-Media-Player/7.01.00.3055\r\nProxy-Authorization: NTLM > TlRMTVNTUAADAAAAGAAYAEwAAAAAAAAAZAAAAAkACQA0AAAACAAIAD0AAAAHAAcARQAAAFdPUktHUk9VUFRFU1RFV01QSU5GLTYwMedQtjN8aj90GKYg8kwvKYEEH/1i5ydGSw==\r\nIf-Modified-Since: > Tue, 18 Mar 2003 17:32:56 GMT; length=25\r\nHost: > www.gruposinos.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not > Modified\r\nDate: Thu, 10 Apr 2003 15:50:28 GMT\r\nContent-Type: > video/x-ms-asf\r\nLast-Modified: Tue, 18 Mar 2003 17:32:56 GMT\r\n\r] > 1051208598.474 7 XXX.XXX.XXX.XXX TCP_MISS/200 2841 GET > http://YYY.YYY.YYY.YYY:8080/ workgroup\testwmp DIRECT/YYY.YYY.YYY.YYY > application/vnd.ms.wms-hdr.asfv1 [Accept: */*\r\nUser-Agent: > NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: > no-cache,rate=1.000000,stream-time=0,stream-offset=0:0,request-context=7222416,max-duration=0\r\nPragma: > xClientGUID={19930DE0-CFE0-11D6-A66A-0040A70012F6}\r\nProxy-Authorization: NTLM > TlRMTVNTUAADAAAAGAAYAEwAAAAAAAAAZAAAAAkACQA0AAAACAAIAD0AAAAHAAcARQAAAFdPUktHUk9VUFRFU1RFV01QSU5GLTYwMedQtjN8aj90GKYg8kwvKYEEH/1i5ydGSw==\r\nProxy-Connection: > Keep-Alive\r\n] [HTTP/1.0 200 OK\r\nServer: Rex/9.0.0.2980\r\nCache-Control: > no-cache\r\nPragma: no-cache\r\nPragma: client-id=2872351586\r\nPragma: > features="broadcast,playlist"\r\nContent-Type: > application/vnd.ms.wms-hdr.asfv1\r\nContent-Length: 2547\r\nConnection: > Keep-Alive\r\n\r] > 1051208627.045 15970 XXX.XXX.XXX.XXX TCP_MISS/200 66994 GET > http://YYY.YYY.YYY.YYY:8080/ workgroup\testwmp DIRECT/YYY.YYY.YYY.YYY > application/x-mms-framed [Accept: */*\r\nUser-Agent: > NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: > no-cache,rate=1.000000,stream-time=0,stream-offset=4294967295:4294967295,request-context=6807716,max-duration=0\r\nPragma: > xPlayStrm=1\r\nPragma: client-id=2872351586\r\nPragma: > xClientGUID={19930DE0-CFE0-11D6-A66A-0040A70012F6}\r\nPragma: > stream-switch-count=1\r\nPragma: stream-switch-entry=ffff:1:0 \r\n] [HTTP/1.0 200 > OK\r\nServer: Rex/9.0.0.2980\r\nCache-Control: no-cache\r\nPragma: > no-cache\r\nPragma: client-id=2872351586\r\nPragma: > features="broadcast,playlist"\r\nContent-Type: application/x-mms-framed\r\n\r] > 1051208657.248 30357 XXX.XXX.XXX.XXX TCP_MISS/000 23 POST > http://YYY.YYY.YYY.YYY:8080/ workgroup\testwmp DIRECT/YYY.YYY.YYY.YYY - > [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nProxy-Authorization: > NTLM > TlRMTVNTUAADAAAAGAAYAEwAAAAAAAAAZAAAAAkACQA0AAAACAAIAD0AAAAHAAcARQAAAFdPUktHUk9VUFRFU1RFV01QSU5GLTYwMfP3798AJ9wMV1aJSMBvnzWOVmjQ2avm/g==\r\nProxy-Connection: > Keep-Alive\r\nPragma: client-id=2872351586\r\nPragma: log-line=XXX.XXX.XXX.XXX > 2003-04-24 18:25:00 - http://YYY.YYY.YYY.YYY:8080/ 0 11 1 - > {19930DE0-CFE0-11D6-A66A-0040A70012F6} 7.1.0.3055 pt-BR - - WMPLAYER.EXE 7.1.0.3055 > Windows_98_SE 4.10.0.2222 Pentium 0 2535 33459 http TCP Windows_Media_Audio_9 - - - > 64008 - 42 0 0 0 0 0 0 1 5 100 - - - - \r\nContent-Length: 0\r\nPragma: > xClientGUID={19930DE0-CFE0-11D6-A66A-0040A70012F6}\r\n] [] > > **************************** > Windows Media Player 9 > **************************** > 1051209541.317 0 XXX.XXX.XXX.XXX TCP_MEM_HIT/200 334 GET > http://www.siteofstream.com/audio.asx workgroup\testwmp NONE/- > video/x-ms-asf [Accept: image/gif, image/x-xbitmap, image/jpeg, > image/pjpeg, application/x-shockwave-flash, */*\r\nReferer: > http://www.siteofstream.com/principal.htm\r\nAccept-Language: > pt-br\r\nProxy-Connection: Keep-Alive\r\nUser-Agent: Mozilla/4.0 > (compatible; MSIE 6.0; Windows 98)\r\nHost: www.gruposinos.com.br\r\n] > [HTTP/1.1 200 OK\r\nServer: Microsoft-IIS/4.0\r\nConnection: > keep-alive\r\nDate: Thu, 24 Apr 2003 18:36:26 GMT\r\nContent-Type: > video/x-ms-asf\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 18 Mar > 2003 17:32:56 GMT\r\nETag: "0d4646974edc21:150dc"\r\nContent-Length: > 25\r\n\r] > 1051209546.213 11 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 220 GET > http://www.siteofstream.com/audio.asx workgroup\testwmp NONE/- > video/x-ms-asf [Accept: */*\r\nUser-Agent: > Windows-Media-Player/9.00.00.2980\r\nProxy-Authorization: NTLM > TlRMTVNTUAADAAAAGAAYAEwAAAAAAAAAZAAAAAkACQA0AAAACAAIAD0AAAAHAAcARQAAAFdPUktHUk9VUFRFU1RFV01QU1VQLTYwMDmcdVzfVF1KbIJyG7mbLpYLryglwR6cgD==\r\nIf-Modified-Since: > Tue, 18 Mar 2003 17:32:56 GMT; length=25\r\nHost: > www.gruposinos.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not > Modified\r\nDate: Thu, 24 Apr 2003 18:36:26 GMT\r\nContent-Type: > video/x-ms-asf\r\nLast-Modified: Tue, 18 Mar 2003 17:32:56 GMT\r\n\r] > > I saw that WMP7 downloaded the "audio.asx" and then follows the > connection, but in the WMP9 logs only shows the download of "audio.asx", > nothig about trying to connect is logged... :( > > Thanks for all help! > > Isa�as > > > Em Qui, 2003-04-24 �s 14:06, Henrik Nordstrom escreveu: > Please > > 1. Set up a dummy account where you are not afraid to give away the > password. > > 2. Enable log_mime_hdrs in squid.conf. > > 3. Try both versions of Media Player, and send the resulting output in > access.log. The next last column (within []) shows the request > headers, and what you are looking for is what differs in the > Proxy-Authenticate request header between the two versions of Media > Player after you have entered the login+password. > > Regards > Henrik > > > On Thursday 24 April 2003 13.22, Isaias - Sinosnet wrote: > > I made the update but the same problem occurred... Now I'm running > > Squid 2.5 STABLE2... Windows Media Player 6.4 and 7 still working, > > while the version 9 still opening that user/password pop-up... > > > > any more ideas? > > > > Thanks! > > Isaias > > > > > > Em Qua, 2003-04-23 �s 09:07, Marc Elsen escreveu: > > > > Isaias - Sinosnet wrote: > > > Hi all! > > > > > > I'm using Squid 2.5PRE13 with NTLM authentication... all > > > works fine, various acls allowing, denying... if I use, in my > > > Windows client, the Windows Media Player 6.4 or 7.0 it works > > > fine... If I use the new version 9, when I do the access it > > > opens a pop-up window asking me for username and password, > > > even if I already logged in with a valid username and in the > > > acls this user have access to the media I'm trying to access > > > to... then, I type the same username, the same password, > > > click "OK" and there comes the pop-up again... I saw > > > something like it in the 2003-03 mail archives, but was with > > > NCSA authentication... Here is the link I've found: > > > > > > http://www.squid-cache.org/mail-archive/squid-users/200303/01 > > >77.html > > > > > > Anyone can help? > > > > Please upgrade to 2.5.STABLE2 > > > > Verify the problem > > > > Thx for all feedback. > > > > M. > > > > > Thanks a lot! > > > > > > Regards, > > > Isaias > > > > -- > > > > 'Love is truth without any future. > > (M.E. 1997) > > -- > Donations welcome if you consider my Free Squid support helpful. > https://www.paypal.com/xclick/business=hno%40squid-cache.org > > If you need commercial Squid support or cost effective Squid or > firewall appliances please refer to MARA Systems AB, Sweden > http://www.marasystems.com/, [EMAIL PROTECTED] > > > >
Windows Media Player 7 (without authentication!) XXX.XXX.XXX.XXX = Windows Box, client IP address YYY.YYY.YYY.YYY = Streaming server IP address Result: Worked! 1059569639.512 644 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 221 GET http://www.siteofstream.com.br/enc/video.asx - NONE/- video/x-ms-asf [Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*\r\nReferer: http://www.siteofstream.com.br/interna/aovivo.htm\r\nAccept-Language: pt-br\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not Modified\r\nDate: Wed, 30 Jul 2003 11:30:17 GMT\r\nContent-Type: video/x-ms-asf\r\nLast-Modified: Wed, 04 Jun 2003 10:49:26 GMT\r\n\r] 1059569649.354 1 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 221 GET http://www.siteofstream.com.br/enc/video.asx - NONE/- video/x-ms-asf [Accept: */*\r\nUser-Agent: Windows-Media-Player/7.01.00.3055\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not Modified\r\nDate: Wed, 30 Jul 2003 11:30:17 GMT\r\nContent-Type: video/x-ms-asf\r\nLast-Modified: Wed, 04 Jun 2003 10:49:26 GMT\r\n\r] 1059569667.667 13087 XXX.XXX.XXX.XXX TCP_MISS/200 186130 GET http://YYY.YYY.YYY.YYY:8080/ - DIRECT/YYY.YYY.YYY.YYY application/octet-stream [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: no-cache,rate=1.000000,stream-time=0,stream-offset=0:0,request-context=7220824,max-duration=0\r\nPragma: xClientGUID={F84CF26F-AAD4-11D7-A7DA-0050BF5C8856}\r\n] [HTTP/1.0 200\r\nContent-type: application/octet-stream\r\nServer: Rex 7.1.0.3055\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nPragma: client-id=2296\r\nPragma: features="broadcast"\r\n\r] 1059569700.289 32921 XXX.XXX.XXX.XXX TCP_MISS/200 500935 GET http://YYY.YYY.YYY.YYY:8080/ - DIRECT/YYY.YYY.YYY.YYY application/octet-stream [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: no-cache,rate=1.000000,stream-time=0,stream-offset=4294967295:4294967295,request-context=6807252,max-duration=0\r\nPragma: xPlayStrm=1\r\nPragma: xClientGUID={F84CF26F-AAD4-11D7-A7DA-0050BF5C8856}\r\nPragma: stream-switch-count=5\r\nPragma: stream-switch-entry=ffff:1:0 ffff:2:2 ffff:3:2 ffff:4:2 ffff:5:0 \r\n] [HTTP/1.0 200\r\nContent-type: application/octet-stream\r\nServer: Rex 7.1.0.3055\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nPragma: client-id=1876\r\nPragma: features="broadcast"\r\n\r] ------------------------------------------------- Windows Media Player 9 (without authentication!) XXX.XXX.XXX.XXX = Windows Box, client IP address YYY.YYY.YYY.YYY = Streaming server IP address Result: Didn't work... 1059571098.982 170 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 221 GET http://www.siteofstream.com.br/enc/video.asx - NONE/- video/x-ms-asf [Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*\r\nReferer: http://www.siteofstream.com.br/interna/aovivo.htm\r\nAccept-Language: pt-br\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not Modified\r\nDate: Wed, 30 Jul 2003 11:30:17 GMT\r\nContent-Type: video/x-ms-asf\r\nLast-Modified: Wed, 04 Jun 2003 10:49:26 GMT\r\n\r] 1059571112.335 20 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 221 GET http://www.siteofstream.com.br/enc/video.asx - NONE/- video/x-ms-asf [Accept: */*\r\nUser-Agent: Windows-Media-Player/9.00.00.2980\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not Modified\r\nDate: Wed, 30 Jul 2003 11:30:17 GMT\r\nContent-Type: video/x-ms-asf\r\nLast-Modified: Wed, 04 Jun 2003 10:49:26 GMT\r\n\r] 1059571167.365 8026 XXX.XXX.XXX.XXX TCP_MISS/200 115505 GET http://YYY.YYY.YYY.YYY:8080/ - DIRECT/YYY.YYY.YYY.YYY application/octet-stream [Accept: */*\r\nUser-Agent: NSPlayer/9.0.0.2980\r\nHost: YYY.YYY.YYY.YYY:8080\r\nX-Accept-Authentication: NTLM, Digest, Basic\r\nPragma: version11-enabled=1\r\nPragma: no-cache,rate=1.000,stream-time=0,stream-offset=0:0,packet-num=4294967295,max-duration=0\r\nPragma: pipeline-experiment=1\r\nSupported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch, com.microsoft.wm.predstrm\r\nPragma: xClientGUID={3300AD50-2C39-46c0-AE0A-67CB52525EB3}\r\nAccept-Language: pt-BR, *;q=0.1\r\n] [HTTP/1.0 200\r\nContent-type: application/octet-stream\r\nServer: Rex 7.1.0.3055\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nPragma: client-id=2288\r\nPragma: features="broadcast"\r\n\r] 1059571194.040 27030 XXX.XXX.XXX.XXX TCP_MISS/200 427131 GET http://YYY.YYY.YYY.YYY:8080/ - DIRECT/YYY.YYY.YYY.YYY application/octet-stream [Accept: */*\r\nUser-Agent: NSPlayer/9.0.0.2980\r\nHost: YYY.YYY.YYY.YYY:8080\r\nX-Accept-Authentication: NTLM, Digest, Basic\r\nPragma: no-cache,rate=1.000,stream-time=0,stream-offset=4294967295:4294967295,packet-num=4294967295,max-duration=0\r\nPragma: xPlayStrm=1\r\nPragma: playlist-gen-id=0\r\nPragma: xClientGUID={3300AD50-2C39-46c0-AE0A-67CB52525EB3}\r\nPragma: stream-switch-count=5\r\nPragma: stream-switch-entry=ffff:1:0 ffff:2:2 ffff:3:2 ffff:4:2 ffff:5:0 \r\nAccept-Language: pt-br, *;q=0.1\r\n] [HTTP/1.0 200\r\nContent-type: application/octet-stream\r\nServer: Rex 7.1.0.3055\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nPragma: client-id=2296\r\nPragma: features="broadcast"\r\n\r] ------------------------------------------------- Windows Media Player 7 (with NTLM authentication!) XXX.XXX.XXX.XXX = Windows Box, client IP address YYY.YYY.YYY.YYY = Streaming server IP address Dummy Account: test Dummy Workgroup: workgroup Result: Worked! 1059574649.896 7 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 222 GET http://www.siteofstream.com.br/enc/video.asx workgroup\test NONE/- video/x-ms-asf [Accept: application/x-shockwave-flash, image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*\r\nReferer: http://www.siteofstream.com.br/interna/aovivo.htm\r\nAccept-Language: pt-br\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; .NET CLR 1.0.3705)\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not Modified\r\nDate: Wed, 30 Jul 2003 11:30:17 GMT\r\nContent-Type: video/x-ms-asf\r\nLast-Modified: Wed, 04 Jun 2003 10:49:26 GMT\r\n\r] 1059574651.866 12 XXX.XXX.XXX.XXX TCP_DENIED/407 1099 GET http://www.siteofstream.com.br/enc/video.asx - NONE/- text/html [Accept: */*\r\nUser-Agent: Windows-Media-Player/7.10.00.3068\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 14:17:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 681\r\nExpires: Wed, 30 Jul 2003 14:17:31 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM\r\nProxy-Authenticate: Basic realm="Autenticacao para acesso a Internet"\r\n\r] 1059574652.006 25 XXX.XXX.XXX.XXX TCP_DENIED/407 1102 GET http://www.siteofstream.com.br/enc/video.asx - NONE/- text/html [Accept: */*\r\nUser-Agent: Windows-Media-Player/7.10.00.3068\r\nProxy-Authorization: NTLM TlRMTVNTUAABAAAABoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAAAAAAAAwAAAA\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 14:17:32 GMT\r\nContent-Type: text/html\r\nContent-Length: 681\r\nExpires: Wed, 30 Jul 2003 14:17:32 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM TlRMTVNTUAACAAAACQAJACgAAACCgkEA4+QwZGi4hpIAAAAAAAAAAFdPUktHUk9VUA==\r\n\r] 1059574652.066 59 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 222 GET http://www.siteofstream.com.br/enc/video.asx workgroup\test NONE/- video/x-ms-asf [Accept: */*\r\nUser-Agent: Windows-Media-Player/7.10.00.3068\r\nProxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEsAAAAAAAAAYwAAAAkACQA0AAAABwAHAD0AAAAHAAcARAAAAFdPUktHUk9VUERPVUdMQVNTVVAtNTA1sEGQREzwkRuscHwXVXp9Q/c7MRPlQElB\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not Modified\r\nDate: Wed, 30 Jul 2003 11:30:17 GMT\r\nContent-Type: video/x-ms-asf\r\nLast-Modified: Wed, 04 Jun 2003 10:49:26 GMT\r\n\r] 1059574653.325 4 XXX.XXX.XXX.XXX TCP_DENIED/407 1069 GET http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: no-cache,rate=1.000000,stream-time=0,stream-offset=0:0,request-context=7189656,max-duration=0\r\nPragma: xClientGUID={75BF703C-797C-49E1-903B-7786ADB74B36}\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 14:17:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 14:17:33 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM\r\nProxy-Authenticate: Basic realm="Autenticacao para acesso a Internet"\r\n\r] 1059574653.423 7 XXX.XXX.XXX.XXX TCP_DENIED/407 1072 GET http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: no-cache,rate=1.000000,stream-time=0,stream-offset=0:0,request-context=7189656,max-duration=0\r\nPragma: xClientGUID={75BF703C-797C-49E1-903B-7786ADB74B36}\r\nProxy-Authorization: NTLM TlRMTVNTUAABAAAABoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAAAAAAAAwAAAA\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 14:17:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 14:17:33 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM TlRMTVNTUAACAAAACQAJACgAAACCgkEAGYZ+lQVB5i4AAAAAAAAAAFdPUktHUk9VUA==\r\n\r] 1059574666.695 1 XXX.XXX.XXX.XXX TCP_DENIED/407 1069 GET http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: no-cache,rate=1.000000,stream-time=0,stream-offset=4294967295:4294967295,request-context=6774528,max-duration=0\r\nPragma: xPlayStrm=1\r\nPragma: xClientGUID={75BF703C-797C-49E1-903B-7786ADB74B36}\r\nPragma: stream-switch-count=5\r\nPragma: stream-switch-entry=ffff:1:0 ffff:2:2 ffff:3:2 ffff:4:2 ffff:5:0 \r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 14:17:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 14:17:46 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM\r\nProxy-Authenticate: Basic realm="Autenticacao para acesso a Internet"\r\n\r] 1059574666.763 13339 XXX.XXX.XXX.XXX TCP_MISS/200 208811 GET http://YYY.YYY.YYY.YYY:8080/ workgroup\test DIRECT/YYY.YYY.YYY.YYY application/octet-stream [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: no-cache,rate=1.000000,stream-time=0,stream-offset=0:0,request-context=7189656,max-duration=0\r\nPragma: xClientGUID={75BF703C-797C-49E1-903B-7786ADB74B36}\r\nProxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEsAAAAAAAAAYwAAAAkACQA0AAAABwAHAD0AAAAHAAcARAAAAFdPUktHUk9VUERPVUdMQVNTVVAtNTA1CRz46gxddSEjjWH83HGbU7Am+nQFuIJA\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 200\r\nContent-type: application/octet-stream\r\nServer: Rex 7.1.0.3055\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nPragma: client-id=2288\r\nPragma: features="broadcast"\r\n\r] 1059574666.821 1 XXX.XXX.XXX.XXX TCP_DENIED/407 1072 GET http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: no-cache,rate=1.000000,stream-time=0,stream-offset=4294967295:4294967295,request-context=6774528,max-duration=0\r\nPragma: xPlayStrm=1\r\nPragma: xClientGUID={75BF703C-797C-49E1-903B-7786ADB74B36}\r\nPragma: stream-switch-count=5\r\nPragma: stream-switch-entry=ffff:1:0 ffff:2:2 ffff:3:2 ffff:4:2 ffff:5:0 \r\nProxy-Authorization: NTLM TlRMTVNTUAABAAAABoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAAAAAAAAwAAAA\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 14:17:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 14:17:46 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM TlRMTVNTUAACAAAACQAJACgAAACCgkEAAZsIA+btlfoAAAAAAAAAAFdPUktHUk9VUA==\r\n\r] 1059574676.643 1 XXX.XXX.XXX.XXX TCP_DENIED/407 1069 POST http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nPragma: client-id=2296\r\nPragma: log-line=XXX.XXX.XXX.XXX 2003-07-30 14:24:06 - http://YYY.YYY.YYY.YYY:8080/ 0 2 1 - {75BF703C-797C-49E1-903B-7786ADB74B36} 7.1.0.3055 pt-BR - - WMPLAYER.EXE 7.10.0.3074 Windows_98 4.10.0.1998 Pentium 0 1444 127815 http TCP Windows_Media_Audio_V8 Windows_Media_Video_V8 - - 153442 - 35 0 0 0 0 0 0 1 5 100 - - - - \r\nContent-Length: 0\r\nPragma: xClientGUID={75BF703C-797C-49E1-903B-7786ADB74B36}\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 14:17:56 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 14:17:56 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM\r\nProxy-Authenticate: Basic realm="Autenticacao para acesso a Internet"\r\n\r] 1059574676.715 7 XXX.XXX.XXX.XXX TCP_DENIED/407 1072 POST http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nProxy-Authorization: NTLM TlRMTVNTUAABAAAABoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAAAAAAAAwAAAA\r\nProxy-Connection: Keep-Alive\r\nPragma: client-id=2296\r\nPragma: log-line=XXX.XXX.XXX.XXX 2003-07-30 14:24:06 - http://YYY.YYY.YYY.YYY:8080/ 0 2 1 - {75BF703C-797C-49E1-903B-7786ADB74B36} 7.1.0.3055 pt-BR - - WMPLAYER.EXE 7.10.0.3074 Windows_98 4.10.0.1998 Pentium 0 1444 127815 http TCP Windows_Media_Audio_V8 Windows_Media_Video_V8 - - 153442 - 35 0 0 0 0 0 0 1 5 100 - - - - \r\nContent-Length: 0\r\nPragma: xClientGUID={75BF703C-797C-49E1-903B-7786ADB74B36}\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 14:17:56 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 14:17:56 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM TlRMTVNTUAACAAAACQAJACgAAACCgkEAVrRBW8WI5nAAAAAAAAAAAFdPUktHUk9VUA==\r\n\r] 1059574676.986 10165 XXX.XXX.XXX.XXX TCP_MISS/200 159498 GET http://YYY.YYY.YYY.YYY:8080/ workgroup\test DIRECT/YYY.YYY.YYY.YYY application/octet-stream [Accept: */*\r\nUser-Agent: NSPlayer/7.1.0.3055\r\nHost: YYY.YYY.YYY.YYY:8080\r\nPragma: no-cache,rate=1.000000,stream-time=0,stream-offset=4294967295:4294967295,request-context=6774528,max-duration=0\r\nPragma: xPlayStrm=1\r\nPragma: xClientGUID={75BF703C-797C-49E1-903B-7786ADB74B36}\r\nPragma: stream-switch-count=5\r\nPragma: stream-switch-entry=ffff:1:0 ffff:2:2 ffff:3:2 ffff:4:2 ffff:5:0 \r\nProxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEsAAAAAAAAAYwAAAAkACQA0AAAABwAHAD0AAAAHAAcARAAAAFdPUktHUk9VUERPVUdMQVNTVVAtNTA1woQxcBwlxEAhvRLl992HS+dRhcNJdXOo\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 200\r\nContent-type: application/octet-stream\r\nServer: Rex 7.1.0.3055\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nPragma: client-id=2296\r\nPragma: features="broadcast"\r\n\r] ------------------------------------------------- Windows Media Player 9 (with NTLM authentication!) XXX.XXX.XXX.XXX = Windows Box, client IP address YYY.YYY.YYY.YYY = Streaming server IP address Dummy Account: test Dummy Workgroup: workgroup Result: Didn't work... 1059571703.150 411 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 221 GET http://www.siteofstream.com.br/enc/video.asx workgroup\test NONE/- video/x-ms-asf [Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*\r\nReferer: http://www.siteofstream.com.br/interna/aovivo.htm\r\nAccept-Language: pt-br\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not Modified\r\nDate: Wed, 30 Jul 2003 11:30:17 GMT\r\nContent-Type: video/x-ms-asf\r\nLast-Modified: Wed, 04 Jun 2003 10:49:26 GMT\r\n\r] 1059571712.805 1 XXX.XXX.XXX.XXX TCP_DENIED/407 1099 GET http://www.siteofstream.com.br/enc/video.asx - NONE/- text/html [Accept: */*\r\nUser-Agent: Windows-Media-Player/9.00.00.2980\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 13:28:32 GMT\r\nContent-Type: text/html\r\nContent-Length: 681\r\nExpires: Wed, 30 Jul 2003 13:28:32 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM\r\nProxy-Authenticate: Basic realm="Autenticacao para acesso a Internet"\r\n\r] 1059571713.308 1 XXX.XXX.XXX.XXX TCP_DENIED/407 1102 GET http://www.siteofstream.com.br/enc/video.asx - NONE/- text/html [Accept: */*\r\nUser-Agent: Windows-Media-Player/9.00.00.2980\r\nProxy-Authorization: NTLM TlRMTVNTUAABAAAABoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAAAAAAAAwAAAA\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 13:28:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 681\r\nExpires: Wed, 30 Jul 2003 13:28:33 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM TlRMTVNTUAACAAAACQAJACgAAACCgkEA4qoD3BhZi0gAAAAAAAAAAFdPUktHUk9VUA==\r\n\r] 1059571713.317 8 XXX.XXX.XXX.XXX TCP_IMS_HIT/304 221 GET http://www.siteofstream.com.br/enc/video.asx workgroup\test NONE/- video/x-ms-asf [Accept: */*\r\nUser-Agent: Windows-Media-Player/9.00.00.2980\r\nProxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEoAAAAAAAAAYgAAAAkACQA0AAAABgAGAD0AAAAHAAcAQwAAAFdPUktHUk9VUElTQUlBU0lORi01NzZpscirKQzoCAlZPQKVtuWKp8M3bYb/H9k=\r\nIf-Modified-Since: Wed, 04 Jun 2003 10:49:26 GMT; length=25\r\nHost: www.siteofstream.com.br\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 304 Not Modified\r\nDate: Wed, 30 Jul 2003 11:30:17 GMT\r\nContent-Type: video/x-ms-asf\r\nLast-Modified: Wed, 04 Jun 2003 10:49:26 GMT\r\n\r] 1059571718.919 74 XXX.XXX.XXX.XXX TCP_DENIED/407 1069 GET http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/9.0.0.2980\r\nHost: YYY.YYY.YYY.YYY:8080\r\nX-Accept-Authentication: NTLM, Digest, Basic\r\nPragma: version11-enabled=1\r\nPragma: no-cache,rate=1.000,stream-time=0,stream-offset=0:0,packet-num=4294967295,max-duration=0\r\nPragma: pipeline-experiment=1\r\nSupported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch, com.microsoft.wm.predstrm\r\nPragma: xClientGUID={3300AD50-2C39-46c0-AE0A-16F2E782A4BF}\r\nAccept-Language: pt-BR, *;q=0.1\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 13:28:38 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 13:28:38 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM\r\nProxy-Authenticate: Basic realm="Autenticacao para acesso a Internet"\r\n\r] 1059571726.039 7 XXX.XXX.XXX.XXX TCP_DENIED/407 1072 GET http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/9.0.0.2980\r\nHost: YYY.YYY.YYY.YYY:8080\r\nX-Accept-Authentication: NTLM, Digest, Basic\r\nPragma: no-cache,rate=1.000,stream-time=0,stream-offset=0:0,packet-num=4294967295,max-duration=0\r\nPragma: pipeline-experiment=1\r\nSupported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch, com.microsoft.wm.predstrm\r\nPragma: xClientGUID={3300AD50-2C39-46c0-AE0A-16F2E782A4BF}\r\nProxy-Authorization: NTLM TlRMTVNTUAABAAAABoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAAAAAAAAwAAAA\r\nConnection: Keep-Alive\r\nAccept-Language: pt-BR, *;q=0.1\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 13:28:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 13:28:46 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM TlRMTVNTUAACAAAACQAJACgAAACCgkEAm+K+wokI3LYAAAAAAAAAAFdPUktHUk9VUA==\r\n\r] 1059571726.068 27 XXX.XXX.XXX.XXX TCP_DENIED/407 998 GET http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/9.0.0.2980\r\nHost: YYY.YYY.YYY.YYY:8080\r\nX-Accept-Authentication: NTLM, Digest, Basic\r\nPragma: no-cache,rate=1.000,stream-time=0,stream-offset=0:0,packet-num=4294967295,max-duration=0\r\nPragma: pipeline-experiment=1\r\nSupported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch, com.microsoft.wm.predstrm\r\nPragma: xClientGUID={3300AD50-2C39-46c0-AE0A-16F2E782A4BF}\r\nProxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEEAAAAAAAAAWQAAAAAAAAA0AAAABgAGADQAAAAHAAcAOgAAAGlzYWlhc0lORi01NzZFYgkIgL9LPxgw8JqKY94hlYdSICgv4P4=\r\nProxy-Connection: Keep-Alive\r\nConnection: Keep-Alive\r\nAccept-Language: pt-BR, *;q=0.1\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 13:28:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 13:28:46 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM\r\n\r] 1059571727.667 7 XXX.XXX.XXX.XXX TCP_DENIED/407 1072 GET http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/9.0.0.2980\r\nHost: YYY.YYY.YYY.YYY:8080\r\nX-Accept-Authentication: NTLM, Digest, Basic\r\nPragma: no-cache,rate=1.000,stream-time=0,stream-offset=0:0,packet-num=4294967295,max-duration=0\r\nPragma: pipeline-experiment=1\r\nSupported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch, com.microsoft.wm.predstrm\r\nPragma: xClientGUID={3300AD50-2C39-46c0-AE0A-16F2E782A4BF}\r\nProxy-Authorization: NTLM TlRMTVNTUAABAAAABoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAAAAAAAAwAAAA\r\nConnection: Keep-Alive\r\nAccept-Language: pt-BR, *;q=0.1\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 13:28:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 13:28:47 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM TlRMTVNTUAACAAAACQAJACgAAACCgkEA03DfbxCg4RUAAAAAAAAAAFdPUktHUk9VUA==\r\n\r] 1059571727.671 3 XXX.XXX.XXX.XXX TCP_DENIED/407 998 GET http://YYY.YYY.YYY.YYY:8080/ - NONE/- text/html [Accept: */*\r\nUser-Agent: NSPlayer/9.0.0.2980\r\nHost: YYY.YYY.YYY.YYY:8080\r\nX-Accept-Authentication: NTLM, Digest, Basic\r\nPragma: no-cache,rate=1.000,stream-time=0,stream-offset=0:0,packet-num=4294967295,max-duration=0\r\nPragma: pipeline-experiment=1\r\nSupported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch, com.microsoft.wm.predstrm\r\nPragma: xClientGUID={3300AD50-2C39-46c0-AE0A-16F2E782A4BF}\r\nProxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEEAAAAAAAAAWQAAAAAAAAA0AAAABgAGADQAAAAHAAcAOgAAAGlzYWlhc0lORi01NzYND7QvCQjboTAMK71HhWv9l9isPuWecUc=\r\nProxy-Connection: Keep-Alive\r\nConnection: Keep-Alive\r\nAccept-Language: pt-BR, *;q=0.1\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Wed, 30 Jul 2003 13:28:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 651\r\nExpires: Wed, 30 Jul 2003 13:28:47 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM\r\n\r]
