Guest

Preview Tool

Cisco Bug: CSCus36846 - Proxy incorrectly detecting certain access as MIME type audio/mpeg

Last Modified

Sep 01, 2016

Products (1)

  • Cisco Web Security Appliance

Known Affected Releases

8.0.6-119 8.5.0-497

Description (partial)

Symptom:
Mime type is not showing correct information in appliance access logs

Conditions:
Download an excel file from link: http://sentia.buzznumbershq.com/Campaign/Excel.aspx?CampaignID=1360&Count=50&txtSearch=safety&Start=01/12/2014&End=31/12/2014
However in the accesslogs is showing MIME type as audio/mpeg while the file is actually just excel file.

Below is the accesslog from WSA:
1420430316.193 3844 10.66.246.176 TCP_MISS/200 79938 GET http://sentia.buzznumbershq.com/Campaign/Excel.aspx?CampaignID=1360&Count=50&txtSearch=safety&Start=01/12/2014&End=31/12/2014 - DIRECT/sentia.buzznumbershq.com audio/mpeg DEFAULT_CASE_12-DefaultGroup-auth.id-NONE-NONE-NONE-DefaultGroup <IW_busi,0.0,0,"-",0,0,0,0,"-",-1,0,-1,"-",-,-,"-","-",-,-,IW_busi,-,"Unknown","-","MPEG","Media","-","-",166.36,0,-,"Unknown","-",-,"-",-,-,"-","-"> - 8965 "05/Jan/2015:14:58:36 +1100" - 431 1420430316.193 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:34.0) Gecko/20100101 Firefox/34.0"

Taken packet capture file, the remote side is actually sending correct Mime type of text/xls
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.