+ Post New Thread
Results 1 to 5 of 5
Internet Related/Filtering/Firewall Thread, Autodesk Software in Technical; This is an informational post for others to pickup once Google indexes it and will serve as place for me ...
  1. #1
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    807
    Thank Post
    83
    Thanked 132 Times in 115 Posts
    Blog Entries
    8
    Rep Power
    32

    Autodesk Software

    This is an informational post for others to pickup once Google indexes it and will serve as place for me to vent... Autodesk releases crap... I've said it... Their AutoCad suite is bloated beyond recognition and it is more of a PITA to install every year. But how does this apply to Internet Related/Filtering/Firewall do you ask? Well, our students go through an internal Squid proxy for traffic logging before hitting the outside content filters. This proxy uses NTLM and by now enterprise level software should know what the hell this is. I come into work this morning to find the student proxy not passing traffic anymore and upon further inspection the volume I have setup to hold logs (30GB mind you) is freaking full. After purging some older logs and getting it working again I began to investigate.

    Code:
    netstat -nat
    This lists all current IP connections to every interface and there was 40,000 of them for a district with 1/10th the amount of students. And only a third of the student body is computers at any given time. So I dumped the entire output to a file in the home directory.

    Code:
    netstat -nat > ~/connections.txt
    Once I fetched and opened it in Excel I was able to sort it out. I was finding machines with thousands of idle connections, all coming from the CAD lab.

    Code:
    tcp6	0	0	10.1.xxx.xxx:3128 	10.1.xxx.xxx:63325	TIME_WAIT
    Now I could parse the Squid access log; which was already bloated out to 2GB by mid morning (this typically doesn't exceed 300MB for an entire day).

    Code:
    less /var/log/squid3/access.log | grep 10.1.xxx.xxx > ~/moreconnections.txt
    Upon opening this 230MB txt file up in Excel and sorting by outgoing connection I find 2,000 GETS to here:

    Code:
    10.1.xxx.xxx	TCP_DENIED/407	5100	GET	http://autodesk-exchange-apps-v-1-5-staging.s3.amazonaws.com/data/content/fil
    Whatever AutoDesk app is running it's trying to get out to the web, getting hit with a challenge response for credentials, ignoring the challenge, and requesting the resource over, and over, and over again; thus filling the logs to oblivion with junk.

    I'm going to try white listing the domain so connections to it don't have to provide credentials and see if that will calm it down. I'm so sick of this....

  2. #2
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    807
    Thank Post
    83
    Thanked 132 Times in 115 Posts
    Blog Entries
    8
    Rep Power
    32
    Looks like that did the trick. Log files are back to a normal size after a full day of using the Autodesk software. It still blows me away that they push off all this content from the local install to web based, and the dev team doesn't have enough foresight to think that organizations that use their software would be doing it from behind a proxy. Unbelievable....

  3. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,052
    Thank Post
    888
    Thanked 1,728 Times in 1,491 Posts
    Blog Entries
    12
    Rep Power
    453
    Are you using the network version?

  4. #4
    Gaz
    Gaz is online now

    Join Date
    Feb 2011
    Location
    Preston
    Posts
    817
    Thank Post
    140
    Thanked 72 Times in 63 Posts
    Rep Power
    21
    This certainly is odd, we use a lot of Autodesk software, Inventor, 3DS Max, Autocad but I can't say I've ever seen it do anything like that before.
    What content are you talking about when you say "they push off all this content from the local install to web based" If you mean things like the Help, its online yes but there is an offline version which you need to download but the kicker is that this only works when you're offline, if you're online then it will use the online version, but I think you can force it to use the offline help not that you would want to because it doesnt include any of the tutorial videos.

  5. #5
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    807
    Thank Post
    83
    Thanked 132 Times in 115 Posts
    Blog Entries
    8
    Rep Power
    32
    It's the stand alone version. I'm fairly certain the content that it was trying to pull was from the help section. It was connections outgoing to Amazon's cloud service AmazonAWS. Anyways, the logs returned to a normal size once I added the amazonaws.com and autodesk.com domains to an ACL that allows connections through Squid to bypass authentication.

SHARE:
+ Post New Thread

Similar Threads

  1. AUTODESK Free software now can be used in the Classroom!
    By chazzy2501 in forum Enterprise Software
    Replies: 21
    Last Post: 25th June 2013, 02:48 PM
  2. Replies: 67
    Last Post: 21st May 2010, 02:59 PM
  3. Autodesk Student Community - free software for your students
    By AngryTechnician in forum Downloads
    Replies: 1
    Last Post: 18th February 2009, 12:12 PM
  4. Ghost or software packaging?
    By eejit in forum Windows
    Replies: 25
    Last Post: 2nd August 2005, 10:06 PM
  5. ContentGenerator.net Software
    By Carl in forum Recommended Suppliers
    Replies: 3
    Last Post: 12th June 2005, 09:03 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •