# http response timeout

**URL:** <https://community.zeek.org/t/http-response-timeout/5009>\
**Category:** Zeek\
**Created:** [August 31, 2017, 11:57pm UTC](https://community.zeek.org/t/http-response-timeout/5009 "2017-08-31T23:57:14Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dk\_Jack](https://avatars.discourse-cdn.com/v4/letter/d/8c91f0/32.png) [@Dk\_Jack](https://community.zeek.org/u/Dk_Jack)\
**Post date:** [August 31, 2017, 11:57pm UTC](https://community.zeek.org/t/http-response-timeout/5009/1 "2017-08-31T23:57:14Z")

</div>

Hi,  
In my http.log, I am seeing some lines being written without response code etc. What could be the reason for this? One reason I could think of was, what if the server or some entity between bro and the server that dropped the request/response thus preventing the response from reaching bro or the connection is closed on receiving the request by a downstream security device. How does bro react in such cases? could one of these scenarios explain why the response fields are missing from the log?

Dk.

---

<div class="post-metadata">

**Author:** ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)\
**Post date:** [September 1, 2017, 1:05pm UTC](https://community.zeek.org/t/http-response-timeout/5009/2 "2017-09-01T13:05:42Z")

</div>

You seem to have a pretty good handle on what could be causing the problem. One additional thing you didn't list is if you have load balancing happening incorrectly. That could cause the same problem because the request could have gone to a different process than the reply.

What would help most at this point is if you could send a conn.log entry for a connection where you saw the http.log missing the response code (feel free to redact IP addresses, they don't matter).

&nbsp;&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![Dk\_Jack](https://avatars.discourse-cdn.com/v4/letter/d/8c91f0/32.png) [@Dk\_Jack](https://community.zeek.org/u/Dk_Jack)\
**Post date:** [September 1, 2017, 4:44pm UTC](https://community.zeek.org/t/http-response-timeout/5009/3 "2017-09-01T16:44:03Z")

</div>

Thanks Seth,  
Unfortunately don't have the conn.log. Will continue to investigate. Thanks

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:45pm UTC](https://community.zeek.org/t/http-response-timeout/5009/4 "2022-05-06T15:45:15Z")

</div>