For some mails I'm trying to send over our SMTP server I get entries in the log like shown below.
Can somebody explain WHAT is timing out here and what IIS is trying to do?
2011-11-27 13:57:26 10.177.121.40 OutboundConnectionCommand SMTPSVC1 BXWEB00 - 25 DATA - - 0 0 4 0 31 SMTP - - - -
2011-11-27 13:57:26 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 354+End+data+with+<CR><LF>.<CR><LF> 0 0 35 0 31 SMTP - - - -
2011-11-27 13:57:26 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 250+2.0.0+Ok:+queued+as+F35C24A057 0 0 34 0 31 SMTP - - - -
2011-11-27 13:57:26 10.177.121.40 OutboundConnectionCommand SMTPSVC1 BXWEB00 - 25 QUIT - - 0 0 4 0 31 SMTP - - - -
2011-11-27 13:57:26 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 221+2.0.0+Bye 0 0 13 0 31 SMTP - - - -
2011-11-27 13:58:32 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 TIMEOUT - BXWEB00.netfra.local 121 16777343 193 67831 637670 SMTP - - - -
2011-11-27 13:58:32 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 QUIT - BXWEB00.netfra.local 240 638122 193 67831 637670 SMTP - - - -
2011-11-27 13:59:57 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 EHLO - +BXWEB00.netfra.local 250 0 186 25 0 SMTP - - - -
2011-11-27 13:59:57 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 MAIL - +FROM:<Email-Service#serverdomain.com> 250 0 62 49 0 SMTP - - - -
2011-11-27 13:59:57 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 RCPT - +TO:<recipient1#anotherdomain.de> 250 0 35 32 0 SMTP - - - -
2011-11-27 13:59:57 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 DATA - +<CHILKAT-MID-937818f1-c530-c3c7-e380-cc106ff13646#BXWEB00.netfra.local> 250 0 155 67995 0 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 220+ffm2mta20.hpuss.de+ESMTP 0 0 28 0 16 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionCommand SMTPSVC1 BXWEB00 - 25 EHLO - BXWEB00.netfra.local 0 0 4 0 16 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 250-ffm2mta20.hpuss.de 0 0 22 0 16 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionCommand SMTPSVC1 BXWEB00 - 25 MAIL - FROM:<Email-Service#serverdomain.com>+SIZE=68278 0 0 4 0 16 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 250+2.1.0+Ok 0 0 12 0 16 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionCommand SMTPSVC1 BXWEB00 - 25 RCPT - TO:<recipient1#anotherdomain.de> 0 0 4 0 16 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 250+2.1.5+Ok 0 0 12 0 16 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionCommand SMTPSVC1 BXWEB00 - 25 DATA - - 0 0 4 0 16 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 354+End+data+with+<CR><LF>.<CR><LF> 0 0 35 0 16 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 250+2.0.0+Ok:+queued+as+DB9C54A057 0 0 34 0 31 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionCommand SMTPSVC1 BXWEB00 - 25 QUIT - - 0 0 4 0 31 SMTP - - - -
2011-11-27 13:59:57 10.177.121.40 OutboundConnectionResponse SMTPSVC1 BXWEB00 - 25 - - 221+2.0.0+Bye 0 0 13 0 31 SMTP - - - -
2011-11-27 14:02:02 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 TIMEOUT - BXWEB00.netfra.local 121 16777343 193 8813 637093 SMTP - - - -
2011-11-27 14:02:02 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 QUIT - BXWEB00.netfra.local 240 637280 193 8813 637093 SMTP - - - -
2011-11-27 14:05:02 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 TIMEOUT - BXWEB00.netfra.local 121 16777343 193 68489 636140 SMTP - - - -
2011-11-27 14:05:02 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 QUIT - BXWEB00.netfra.local 240 636608 193 68489 636140 SMTP - - - -
2011-11-27 14:06:02 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 TIMEOUT - BXWEB00.netfra.local 121 16777343 193 8501 605751 SMTP - - - -
2011-11-27 14:06:02 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 QUIT - BXWEB00.netfra.local 240 605939 193 8501 605751 SMTP - - - -
2011-11-27 14:07:32 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 TIMEOUT - BXWEB00.netfra.local 121 16777343 193 8813 605377 SMTP - - - -
2011-11-27 14:07:32 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 QUIT - BXWEB00.netfra.local 240 605565 193 8813 605377 SMTP - - - -
2011-11-27 14:08:58 127.0.0.1 BXWEB00.netfra.local SMTPSVC1 BXWEB00 127.0.0.1 0 EHLO - +BXWEB00.netfra.local 250 0 186 25 0 SMTP - - - -
The timeouts were caused by not actively closing the connection from the client to the SMTP server. The component used was Chilkat (http://www.chilkatsoft.com/refdoc/csMailManRef.html) and the manual states:
The mailman object automatically opens an SMTP connection (if necessary) whenever an email-sending method is called. The connection is kept open until explicitly closed by this method. Calling this method is entirely optional. The SMTP connection is also automatically closed when the mailman object is destructed. Thus, if an application calls SendEmail 10 times to send 10 emails, the 1st call will open the SMTP connection, while the subsequent 9 will send over the existing connection (unless a property such as username, login, hostname, etc. is changed, which would force the connection to become closed and re-established with the next mail-sending method call).
Note: This method sends a QUIT command to the SMTP server prior to closing the connection.
However, this seems to be a problem for some SMTP server. They want the connection to be closed after each mail.
You didn't post the lines before that TIMEOUT line. If I had to guess, the previous line was a RCPT TO line, when the DATA line was expected.
This smells like an antivirus issue. For a test, try disabling any antivirus software you have, and see if the entries go away.
--Dave
Related
unstable BGP connection
I notice that bdp lost Neighbhor connection
Neighbhor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd NeighborName
----------- --- ----- --------- --------- -------- ----- ------ --------- -------------- --------------
10.0.0.57 4 64600 117 206 0 0 0 00:00:49 1 ARISTA01T1
10.0.0.59 4 64600 156 237 0 0 0 00:00:33 Connect ARISTA02T1
10.0.0.61 4 64600 161 238 0 0 0 00:00:53 1 ARISTA03T1
10.0.0.63 4 64600 117 184 0 0 0 00:00:02 1 ARISTA04T1
But after a couple of seconds, another neighbor lost the connection
Neighbhor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd NeighborName
----------- --- ----- --------- --------- -------- ----- ------ --------- -------------- --------------
10.0.0.57 4 64600 166 269 0 0 0 00:00:37 1 ARISTA01T1
10.0.0.59 4 64600 178 262 0 0 0 00:00:16 1 ARISTA02T1
10.0.0.61 4 64600 209 301 0 0 0 00:00:35 1 ARISTA03T1
10.0.0.63 4 64600 147 224 0 0 0 00:00:50 Connect ARISTA04T1
The problem there is that for some reason some Neighbors lost connection during the session
The connection is unstable . For example, the second lost connection and after couple seconds it restores the connection but the fourth neighbor lost it . Not sure how to debug such issue or fix it
Normally, a BGP Notification will be sent--that message contains info on why the connection dropped. Typically, it is "hold time expired" due to an unreliable datalink. Try running a constant traceroute from peer addr to peer addr while connection bounces (could be a routing issue--e.g. does bgp advertise path to peer itself?).
When I run below curl upload command it gives me big output. How can I cut short this to just show the final upload speed?
curl --upload-file /tmp/testlocal -v -u tu**r:******#*23 http://nexus3-core:8081/nexus3/repository/tes******/tes*****
* Expire in 0 ms for 6 (transfer 0x558e6c881f50)
* Expire in 1 ms for 1 (transfer 0x558e6c881f50)
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Expire in 0 ms for 1 (transfer 0x558e6c881f50)
* Expire in 2 ms for 1 (transfer 0x558e6c881f50)
* Expire in 0 ms for 1 (transfer 0x558e6c881f50)
* Expire in 1 ms for 1 (transfer 0x558e6c881f50)
* Expire in 1 ms for 1 (transfer 0x558e6c881f50)
* Expire in 1 ms for 1 (transfer 0x558e6c881f50)
* Trying 172.30.51.207...
* TCP_NODELAY set
* Expire in 200 ms for 4 (transfer 0x558e6c881f50)
* Connected to nexus3-core (172.30.51.207) port 8081 (#0)
* Server auth using Basic with user 'tu****'
> PUT /nexus3/repository/testu****/tes**** HTTP/1.1
> Host: nexus3-core:8081
> Authorization: Basic dHVzZXI6VHVzZXJAMTIz
> User-Agent: curl/7.64.0
> Accept: */*
> Content-Length: 1048576000
> Expect: 100-continue
>
* Expire in 1000 ms for 0 (transfer 0x558e6c881f50)
< HTTP/1.1 100 Continue
} [41940 bytes data]
4 1000M 0 0 4 45.5M 0 50.7M 0:00:19 --:--:-- 0:00:19 50.6M
8 1000M 0 0 8 89.7M 0 47.3M 0:00:21 0:00:01 0:00:20 47.2M
13 1000M 0 0 13 139M 0 48.2M 0:00:20 0:00:02 0:00:18 48.2M
19 1000M 0 0 19 193M 0 49.6M 0:00:20 0:00:03 0:00:17 49.6M
23 1000M 0 0 23 234M 0 47.9M 0:00:20 0:00:04 0:00:16 47.9M
29 1000M 0 0 29 291M 0 49.4M 0:00:20 0:00:05 0:00:15 49.2M
34 1000M 0 0 34 346M 0 50.1M 0:00:19 0:00:06 0:00:13 51.2M
40 1000M 0 0 40 408M 0 51.7M 0:00:19 0:00:07 0:00:12 53.8M
46 1000M 0 0 46 465M 0 52.3M 0:00:19 0:00:08 0:00:11 54.3M
52 1000M 0 0 52 520M 0 52.5M 0:00:19 0:00:09 0:00:10 57.1M
58 1000M 0 0 58 587M 0 53.9M 0:00:18 0:00:10 0:00:08 59.1M
64 1000M 0 0 64 648M 0 54.4M 0:00:18 0:00:11 0:00:07 60.3M
70 1000M 0 0 70 706M 0 54.7M 0:00:18 0:00:12 0:00:06 59.5M
76 1000M 0 0 76 763M 0 54.9M 0:00:18 0:00:13 0:00:05 59.5M
78 1000M 0 0 78 781M 0 51.2M 0:00:19 0:00:15 0:00:04 48.7M
79 1000M 0 0 79 791M 0 49.7M 0:00:20 0:00:15 0:00:05 40.7M
83 1000M 0 0 83 839M 0 49.6M 0:00:20 0:00:16 0:00:04 38.2M
89 1000M 0 0 89 895M 0 50.0M 0:00:19 0:00:17 0:00:02 37.8M
95 1000M 0 0 95 957M 0 50.6M 0:00:19 0:00:18 0:00:01 38.9M* We are completely uploaded and fine
100 1000M 0 0 100 1000M 0 48.6M 0:00:20 0:00:20 --:--:-- 41.0M< HTTP/1.1 201 Created
< Date: Fri, 08 Jan 2021 06:52:32 GMT
< Server: Nexus/3.23.0-03 (OSS)
< X-Content-Type-Options: nosniff
< Content-Security-Policy: sandbox allow-forms allow-modals allow-popups allow-presentation allow-scripts allow-top-navigation
< X-XSS-Protection: 1; mode=block
< Content-Length: 0
<
100 1000M 0 0 100 1000M 0 47.9M 0:00:20 0:00:20 --:--:-- 41.9M
My desired out put is as below
Curl upload speed : 41.9M
I know curl prints stderr and I am struggling to get that output with grep
Not exactly answering your question but perhaps a better way to get the average upload speed is to use the dedicated option for it? Try this:
curl -w 'Speed: %{speed_upload}\n' -T local-file http://...target...
That -w option string will then output the average upload speed (in bytes/sec) after a successful transfer.
With your shown samples, could you please try following. Couldn't test it(because of the curl command), it should work ok IMHO.
These commands are printing last field of your output's last line.
your_curl_command |
tac |
awk 'FNR==1{print $NF;next}'
OR with-in single awk try:
your_curl_command |
awk '{val=$NF} END{print val}'
If you are always interested only in last line last field, you might combine tail -1 with awk to get it following way:
curl_command | tail -1 | awk '{print $NF}'
I'm having problems with this exercise.
I've a string array and have to add those array into a column.
I've a CSV file and know only the column index.
I need also to start input fro row 12 until the array is finished.
I've tried this in Python:
index = 0
col = "17"
while index < len(packages):
cmdw = "awk -F \"\t\" -V OFS=\"\t\" -v col=" + col + " -v dato=" + packages[index] + " '{$col=$dato};' 1540476113.gt.tie "
print("eseguo il comando ",cmd)
os.system(cmdw)
print("comando eseguito")
index = index + 1
print("packages aggiunti!")
Sample data input file:
# TIE output version: 1.0 (text format)
# generated by: . -a ndping_1.0 -r /home/giuseppe/Scrivania/gruppo30/1540476113/traffic.pcap
# Working Mode: off-line
# Session Type: biflow
# 1 plugins enabled: ndping
# begin trace interval: 1540476116.42434
# begin TIE Table
# id src_ip dst_ip proto sport dport dwpkts uppkts dwbytes upbytes t_start t_last app_id sub_id app_details confidence
17 192.168.20.105 216.58.205.42 6 50854 443 8 9 1507 1728 1540476136.698920 1540476136.879543 501 0 Google 100
26 192.168.20.105 151.101.66.202 6 40107 443 15 18 5874 1882 1540476194.196948 1540476204.641949 501 0 SSL_with_certificate 100
27 192.168.20.105 31.13.90.2 6 48133 443 10 15 4991 1598 1540476194.218949 1540476196.358946 501 0 Facebook 100
38 192.168.20.105 13.32.71.69 6 52108 443 9 12 5297 2062 1540476195.492946 1540476308.604998 501 0 SSL_with_certificate 100
0 34.246.212.92 192.168.20.105 6 443 37981 3 2 187 98 1540476116.042434 1540476189.868844 0 0 Other TCP 0
29 192.168.20.105 13.32.123.222 6 36481 443 11 15 6638 1914 1540476194.376945 1540476308.572998 501 0 SSL_with_certificate 100
31 192.168.20.105 8.8.8.8 17 1219 53 1 1 253 68 1540476194.898945 1540476194.931198 501 0 DNS 100
42 192.168.20.105 8.8.8.8 17 8339 53 1 1 198 70 1540476215.626959 1540476215.643374 501 0 DNS 100
33 192.168.20.105 8.8.8.8 17 10529 53 1 1 198 70 1540476194.960946 1540476194.977174 501 0 DNS 100
35 192.168.20.105 8.8.8.8 17 10916 53 1 1 169 64 1540476195.149943 1540476195.189064 501 0 DNS 100
44 192.168.20.105 8.8.8.8 17 11736 53 1 1 111 63 1540476217.327956 1540476217.369471 501 0 DNS 100
21 192.168.20.105 8.8.8.8 17 13249 53 1 1 102 70 1540476189.828943 1540476189.869843 501 0 DNS 100
24 192.168.20.105 8.8.8.8 17 14312 53 1 1 128 64 1540476194.150951 1540476194.166601 501 0 DNS 100
28 192.168.20.105 8.8.8.8 17 15049 53 1 1 174 67 1540476194.312946 1540476194.354500 501 0 DNS 100
37 192.168.20.105 8.8.8.8 17 17362 53 1 1 75 59 1540476195.428947 1540476195.468915 501 0 DNS 100
39 192.168.20.105 8.8.8.8 17 25274 53 1 1 258 63 1540476195.683944 1540476195.699796 501 0 DNS 100
25 192.168.20.105 8.8.8.8 17 26608 53 1 1 122 64 1540476194.191945 1540476194.207576 501 0 DNS 100
14 192.168.20.105 8.8.8.8 17 35680 53 1 1 120 59 1540476133.452918 1540476133.486316 501 0 DNS 100
18 192.168.20.105 8.8.8.8 17 43833 53 1 1 118 72 1540476136.868920 1540476136.902531 501 0 DNS 100
4 192.168.20.105 8.8.8.8 17 43919 53 1 1 93 61 1540476126.806916 1540476126.822800 501 0 DNS 100
2 192.168.20.105 8.8.8.8 17 51340 53 1 1 141 63 1540476124.935913 1540476124.967768 501 0 DNS 100
3 192.168.20.105 8.8.8.8 17 64815 53 1 1 141 63 1540476124.974914 1540476125.006749 501 0 DNS 100
30 192.168.20.105 216.58.198.14 6 48980 443 4 2 1093 884 1540476194.835944 1540476195.102945 0 0 Other TCP 0
I would be able to add to this file a new colum after the 12 row of header
You can directly read the file in python, skip the 12 line header and append required values to last column.
I have just printed the output in below code you can write it to a new file if required.
index = 0
col = "17"
header_len = 0
packages = [ "dato =" + str(i) for i in range(100)] # created dummy list, replace it with original one
with open("input_file.txt",'r+') as f :
for line in f:
if header_len >= 12 and index < len(packages): # comparing header length and remaining index in list.
print("{}\t{}".format(line.rstrip('\n'),packages[index]))
index+=1
else:
print(line)
header_len+=1
sample output :
# TIE output version: 1.0 (text format)
# generated by: . -a ndping_1.0 -r /home/giuseppe/Scrivania/gruppo30/1540476113/traffic.pcap
# Working Mode: off-line
# Session Type: biflow
# 1 plugins enabled: ndping
# begin trace interval: 1540476116.42434
# begin TIE Table
# id src_ip dst_ip proto sport dport dwpkts uppkts dwbytes upbytes t_start t_last app_id sub_id app_details confidence
17 192.168.20.105 216.58.205.42 6 50854 443 8 9 1507 1728 1540476136.698920 1540476136.879543 501 0 Google 100
26 192.168.20.105 151.101.66.202 6 40107 443 15 18 5874 1882 1540476194.196948 1540476204.641949 501 0 SSL_with_certificate 100 dato =0
27 192.168.20.105 31.13.90.2 6 48133 443 10 15 4991 1598 1540476194.218949 1540476196.358946 501 0 Facebook 100 dato =1
38 192.168.20.105 13.32.71.69 6 52108 443 9 12 5297 2062 1540476195.492946 1540476308.604998 501 0 SSL_with_certificate 100 dato =2
0 34.246.212.92 192.168.20.105 6 443 37981 3 2 187 98 1540476116.042434 1540476189.868844 0 0 Other TCP 0 dato =3
29 192.168.20.105 13.32.123.222 6 36481 443 11 15 6638 1914 1540476194.376945 1540476308.572998 501 0 SSL_with_certificate 100 dato =4
I have one domain and 3 web applications (and I'll have much more).
I would like to create the main application which will contain some list with links and description about these applications.
I have the main application in IIS and then others like sub-applications. I would like to navigate between them like mydomain.com/app1/then/something and mydomain.com/app2/index...
When I create pure HTML (using <a href="">) everything is working, but when I create a web application - there is problem.
In Firefox I get only white screen when I try to access sub-application
(e.g. mydomain.com/app1) and in Chrome HTTP 500.
I am using Razor pages.
I expect that this is a problem with routing so I'll have to change some routing conditions or map the other apps.
Could you give me a hint, please? I tried to search for some solutions, but I couldn't find one (I was probably searching bad sentence).
Thank you for every advice.
Edit: Added logs
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2018-09-25 07:33:35
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2018-09-25 07:33:35 10.208.132.246 GET / - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 - 200 0 0 1771
2018-09-25 07:33:35 10.208.132.246 GET /css/site.css - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 https://example.com:12443/ 304 0 0 9
2018-09-25 07:33:35 10.208.132.246 GET /lib/bootstrap/dist/css/bootstrap.css - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 https://example.com:12443/ 304 0 0 10
2018-09-25 07:33:35 10.208.132.246 GET /css/site.min.css v=kHvJwvVAK1eJLN4w8xygUR3nbvlLmRwi5yr-OuAO90E 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 https://example.com:12443/ 304 0 0 9
2018-09-25 07:33:35 10.208.132.246 GET /js/site.min.js v=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 https://example.com:12443/ 200 0 0 5
2018-09-25 07:33:35 10.208.132.246 GET /lib/jquery/dist/jquery.js - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 https://example.com:12443/ 304 0 0 2
2018-09-25 07:33:35 10.208.132.246 GET /js/site.js v=dLGP40S79Xnx6GqUthRF6NWvjvhQ1nOvdVSwaNcgG18 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 https://example.com:12443/ 304 0 0 4
2018-09-25 07:33:35 10.208.132.246 GET /lib/bootstrap/dist/js/bootstrap.js - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 https://example.com:12443/ 304 0 0 4
2018-09-25 07:33:35 10.208.132.246 GET /favicon.ico - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 - 200 0 0 50
2018-09-25 07:33:43 10.208.132.246 GET /App1/ - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 https://example.com:12443/ 500 19 183 43
2018-09-25 07:33:46 10.208.132.246 GET /App1 - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 - 500 19 183 42
2018-09-25 07:33:54 10.208.132.246 GET /App2 - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 - 500 19 183 44
2018-09-25 07:34:03 10.208.132.246 GET /App2/App2SpecificPage/Parameter - 12443 - 10.217.165.172 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:62.0)+Gecko/20100101+Firefox/62.0 - 500 19 183 42
Many thaks to poke
My problem was combination of missing app.UsePathBase("/app1") in application Startup.cs file and bad settings in IIS.
But main problem was that I didn't added application to the middleware.
I have my bot. it's online. on a local machine the bot is working fine, but on the server it is returning unauthorized error. These are the iis logs
2016-12-30 23:06:44 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.78.21.180 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 93
2016-12-30 23:06:44 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.121.93.134 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 187
2016-12-30 23:06:45 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.127.183.46 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 374
2016-12-30 23:06:45 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.121.88.101 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 187
2016-12-30 23:06:45 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.127.183.46 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 374
2016-12-30 23:06:45 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.127.183.64 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 375
2016-12-30 23:06:47 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.121.93.134 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 187
2016-12-30 23:06:47 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.121.93.134 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 187
2016-12-30 23:06:47 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.127.183.64 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 374
2016-12-30 23:06:47 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.121.92.251 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 187
2016-12-30 23:06:48 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.127.183.46 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 390
2016-12-30 23:06:48 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.121.91.106 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 187
2016-12-30 23:06:48 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.121.93.134 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 187
2016-12-30 23:06:48 104.168.146.32 POST /rbots/mybot/api/messages - 443 - 40.78.17.157 BF-Facebook+(Microsoft-BotFramework/3.1++https://botframework.com/ua) - 401 0 0 78
we didn't do anything to the bot; however, suddenly it stopped working after the reboot. I gave full permission to the folder that's containing the bot, but still not working.