Hi,
Look at this log snippet.
Can you see that TCP_DENIED/403 is immediately followed by TCP_REDIRECT?
Is that not illogical?
Can you explain it? Why are there TCP_DENIED messages?
013-02-27T16:41:31.620 1361983291.620 7 3.215.120.184
TCP_DENIED/403 3599 CONNECT gdata.youtube.com:443 - HIER_NONE -
2013-02-27T16:41:32.233 1361983292.233 59930 3.215.120.184
TCP_MISS/200 4175 CONNECT p01-keyvalueservice.icloud.com:443 3257|0|3|8
HIER_DIRECT comp3
2013-02-27T16:41:51.100 1361983311.100 19480 3.215.120.184
TCP_REDIRECT/301 277 GET http://redirector.c.youtube.com/videoplayback?
3257|0|3|8 HIER_NONE comp3
2013-02-27T16:41:51.231 1361983311.231 17 3.215.120.184
TCP_MISS/206 371 GET
http://5.3.6.204/9d26c1edddd9f1a0f67b1df5e0e2b4ca45a2b9c1_playlist.m3u8
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:41:51.296 1361983311.296 14 3.215.120.184
TCP_MISS/206 508 GET
http://5.3.6.204/9d26c1edddd9f1a0f67b1df5e0e2b4ca45a2b9c1_playlist.m3u8
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:41:51.765 1361983311.765 330 3.215.120.184
TCP_REDIRECT/301 277 GET http://redirector.c.youtube.com/videoplayback?
3257|0|3|8 HIER_NONE comp3
2013-02-27T16:41:51.30 1361983311.30 16 95.215.120.184
TCP_MISS/200 463 GET
http://5.3.6.204/9d26c1edddd9f1a0f67b1df5e0e2b4ca45a2b9c1_playlist.m3u8
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:41:53.884 1361983313.884 1883 3.215.120.184
TCP_MISS/200 376511 GET
http://5.3.6.204/9d26c1edddd9f1a0f67b1df5e0e2b4ca45a2b9c1_001.ts
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:41:54.560 1361983314.560 123 3.215.120.184
TCP_MISS/204 499 GET http://s2.youtube.com/s? 3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:41:55.462 1361983315.462 1004 3.215.120.184
TCP_MISS/204 832 GET http://www.youtube.com/ptracking? 3257|0|3|8
HIER_DIRECT comp3
2013-02-27T16:42:01.491 1361983321.491 6 3.215.120.184
TCP_MISS/200 463 GET
http://5.3.6.204/9d26c1edddd9f1a0f67b1df5e0e2b4ca45a2b9c1_playlist.m3u8
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:42:02.945 1361983322.945 327 3.215.120.184
TCP_REDIRECT/301 277 GET http://redirector.c.youtube.com/videoplayback?
3257|0|3|8 HIER_NONE comp3
2013-02-27T16:42:03.085 1361983323.085 18 3.215.120.184
TCP_MISS/206 371 GET
http://5.3.6.204/9d26c1edddd9f1a0f67b1df5e0e2b4ca45a2b9c1_playlist.m3u8
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:42:03.145 1361983323.145 14 3.215.120.184
TCP_MISS/206 508 GET
http://5.3.6.204/9d26c1edddd9f1a0f67b1df5e0e2b4ca45a2b9c1_playlist.m3u8
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:42:03.267 1361983323.267 7 3.215.120.184
TCP_DENIED/403 4252 GET http://redirector.c.youtube.com/videoplayback?
3257|0|3|8 HIER_NONE comp3
2013-02-27T16:42:03.639 1361983323.639 328 3.215.120.184
TCP_REDIRECT/301 277 GET http://redirector.c.youtube.com/videoplayback?
3257|0|3|8 HIER_NONE comp3
2013-02-27T16:42:06.805 1361983326.805 324 3.215.120.184
TCP_REDIRECT/301 277 GET http://redirector.c.youtube.com/videoplayback?
3257|0|3|8 HIER_NONE comp3
2013-02-27T16:42:06.869 1361983326.869 15 3.215.120.184
TCP_MISS/304 212 GET
http://5.3.6.204/9d26c1edddd9f1a0f67b1df5e0e2b4ca45a2b9c1_playlist.m3u8
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:42:06.932 1361983326.932 14 3.215.120.184
TCP_MISS/206 508 GET
http://5.3.6.204/9d26c1edddd9f1a0f67b1df5e0e2b4ca45a2b9c1_playlist.m3u8
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:42:07.064 1361983327.064 14 3.215.120.184
TCP_DENIED/403 4252 GET http://redirector.c.youtube.com/videoplayback?
3257|0|3|8 HIER_NONE comp3
2013-02-27T16:42:07.436 1361983327.436 327 3.215.120.184
TCP_REDIRECT/301 277 GET http://redirector.c.youtube.com/videoplayback?
3257|0|3|8 HIER_NONE comp3
2013-02-27T16:42:11.122 1361983331.122 395 3.215.120.184
TCP_MISS/200 2830 GET
http://www.digicert.com/CACerts/DigiCertHighAssuranceEVCA-1.crt
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:42:12.177 1361983332.177 49393
dab-bas2-h-61-7.dab.02.net TCP_MISS/200 138 CONNECT ex.mailsuite.com:443
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:42:15.202 1361983335.202 4657 3.215.120.184
TCP_MISS/200 4193 CONNECT ex.mailsuite.com:443 3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:42:21.399 1361983341.399 403 3.215.120.184
TCP_MISS/200 2830 GET
http://www.digicert.com/CACerts/DigiCertHighAssuranceEVCA-1.crt
3257|0|3|8 HIER_DIRECT comp3
2013-02-27T16:42:37.894 1361983357.894 89929 3.215.120.184
TCP_MISS/200 5699 CONNECT gs-loc.apple.com:443 3257|0|3|8 HIER_DIRECT comp3
Regards
Marton Papp
