GET /aceBankCBS/websocket-tunnel?token=010A36823D3FF22287309A8C592C1B046E50465362DC4F6B9CE1C2E53A2489CB&GUAC_DATA_SOURCE=mysql&GUAC_ID=274&GUAC_TYPE=c&GUAC_WIDTH=1366&GUAC_HEIGHT=635&GUAC_DPI=96&GUAC_AUDIO=audio%2FL8&GUAC_AUDIO=audio%2FL16&GUAC_IMAGE=image%2Fjpeg&GUAC_IMAGE=image%2Fpng&GUAC_IMAGE=image%2Fwebp HTTP/1.1 Host: 103.115.232.22:2790 User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0 Accept: */* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Sec-WebSocket-Version: 13 Origin: http://103.115.232.22:2790 Sec-WebSocket-Protocol: guacamole Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: Zvk3/kV4ybnfVqM+QwtUYA== DNT: 1 Connection: keep-alive, Upgrade Pragma: no-cache Cache-Control: no-cache Upgrade: websocket
HTTP/1.1 101 Switching Protocols Server: Apache-Coyote/1.1 Upgrade: websocket Connection: upgrade Sec-WebSocket-Accept: D6A8C+QV7sHMKnLCckBZKowuOCA= Sec-WebSocket-Protocol: guacamole Sec-WebSocket-Extensions: permessage-deflate Date: Sun, 16 Feb 2020 07:08:18 GMT On Sun, 16 Feb 2020, 22:13 Manoj Patil, <[email protected]> wrote: > Hi all > > Today I am see in tcp and web socket packet there is audio traffic is > found but I am not enable the audio I think by default audio is enable > when guacamole is install . > > Please guide us how to disable the audio communication from server to > client and viceversa . > > I am using mysql authentication. > > On Sun, 16 Feb 2020, 14:30 ivanmarcus, <[email protected]> > wrote: > >> In the Guacamole GUI there's a tickbox 'disable audio' >> >> You could also check this out: >> >> http://guacamole.apache.org/doc/gug/configuring-guacamole.html >> >> which explains how the audio works (and from that perhaps how you might >> deal with it in your configuration). >> >> On 16/02/2020 12:05 p.m., Manoj Patil wrote: >> >> Hi >> I agree to we can not send u un- encrypted traffic for checking but as >> per discussion I ask you how to check at guacamole end if audio is enabled? >> And if enabled then give me solution for disable the audio streaming >> >> On Thu, 13 Feb 2020, 22:19 Nick Couchman, <[email protected]> wrote: >> >>> On Thu, Feb 13, 2020 at 9:03 AM Manoj Patil <[email protected]> >>> wrote: >>> >>>> Hello Mike, >>>> >>>> We have investigate further and there in we found that there's an >>>> continues ACK/SYN/PING traffic flows between server and client for an >>>> absolutely idle session. >>>> >>>> >>> Yes, this is by design - the Guacamole protocol has built-in mechanisms >>> to verify that the connection is still active and prevent the server >>> (guacd) from dropping the connection. However, as Mike stated, the amount >>> of traffic generates solely for keeping alive an idle connection is very >>> low - 17Kb/s - so it does not account for all of the traffic you are seeing >>> - something else is going on. >>> >>> >>>> Due to which number of packets and in turn data exchange >>>> increases continuously for an absolutely idle session. >>>> >>> >>> Absolutely idle is a little bit of a misnomer, here. If a session is in >>> progress, it will *never* be "absolutely idle" - that is, there will always >>> be some amount of minimal data exchange in order to keep the session alive >>> - else it will shut down. This is true of pretty much any protocol - RDP, >>> VNC, SSH, Telnet, and Guacamole - all will have some minimal amount of >>> overhead client/server traffic even when there are no mouse/keyboard >>> actions and the screen is not being updated. >>> >>> >>>> >>>> Can you please guide us on how to stop continues server >>>> PING/NOP/ACK/SYN ? >>>> >>> >>> No, this cannot be disabled without changing the code, and the result >>> would be undesirable - the remote connection would shut down. And, this >>> isn't a problem - again, the amount of data you're seeing shows that >>> something else is going on aside from a completely idle connection. You >>> might check and see if audio is being generated that would account for the >>> higher bandwidth utilization, or if file sharing is enabled. >>> >>> And, as Mike said, in order to truly debug what's going on, here, you >>> need to look at the traffic un-encrypted. This will allow you to see the >>> actual Guacamole protocol packets that are being exchanged and figure out >>> where the data is coming from. >>> >>> -Nick >>> >> >>
