HTTP Anti-Virus Proxy

I'm new to havp and pretty raw with linux, but I've been experimenting with IPcop / copfilter / havp, and I'm unable to get past some issues with streaming media content.

I'm running transparent proxy and I'm unable to view any of the abc.com "full episodes" when havp is enabled. I'm also inconsistent with some flash content (the demo's at www.flashvideofactory.com).

I'm aware of the STREAMUSERAGENT and STREAMSCANSIZE settings in havp.config, but I cannot find the right settings that have any impact... additionally, my whitelist (/var/log/copfilter/default/opt/havp/etc/whitelist)
seems to not be obeyed...

Any opinions?
Thanks!
Mitch

Usually some "in-browser video" uses the browsers User-Agent string, so you can't use STREAMUSERAGENT to catch them. But it should not matter though. If you have a small KEEPBACKBUFFER, it only delays the video a bit, it should not stop it. You could try if "RANGE true" makes any difference.

Also to whitelist, you need to find out where exactly are the videos coming, it's not necessarily from the same server as abc.com. And it might not even be HTTP protocol it's using, so it's not HAVPs problem.

thank you for the response. The RANGE true setting seemed to do the trick!

This seems to reinforce the idea that I'm not finding the correct url sources. I realize that the source of the stream may not be abc.com or flashvideofactory.com; but I've no idea how to definitively find the source. Do you have any suggestions?

thanks again,
Mitch

There's few nice programs, if you can't get any "properties" on the video, or see the url in html source..

I like Paros, it acts as proxy and logs all requests/headers etc..

http://www.parosproxy.org/

And then the more "difficult" network analyzers..

http://www.wireshark.org/
http://www.ethereal.com/

fabulous - Paros is exactly the tool I've been missing

thanks for a great product!