good day to all,
my windows clients can connect successfully to regular skype, but cannot connect to skype for business. With the included extract of client machine 10.231.0.20 is there anything that can tell me why it is not connecting?
ip squid : 10.230.5.71
tested client machine: 10.231.0.20
skype for business: 16.0.12325.20280 32 bit
*********
squid -v:
[root@s03-prxy squid]# squid -v
Squid Cache: Version 4.8
Service Name: squid
This binary uses OpenSSL 1.0.2k-fips 26 Jan 2017. For legal restrictions on distribution see https://www.openssl.org/source/license.html
configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid' '--disable-dependency-tracking' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=DB,LDAP,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB,getpwnam,fake' '--enable-auth-ntlm=fake' '--enable-auth-digest=file,LDAP,eDirectory' '--enable-auth-negotiate=kerberos,wrapper' '--enable-external-acl-helpers=wbinfo_group,kerberos_ldap_group,LDAP_group,delayer,file_userip,SQL_session,unix_group,session,time_quota' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-icap-client' '--enable-ident-lookups' '--enable-linux-netfilter' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-storeio=aufs,diskd,ufs,rock' '--enable-wccpv2' '--enable-esi' '--enable-security-cert-generators' '--enable-security-cert-validators' '--enable-icmp' '--with-aio' '--with-default-user=squid' '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--enable-ssl-crtd' '--with-pthreads' '--with-included-ltdl' '--disable-arch-native' '--without-nettle' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic' 'LDFLAGS=-Wl,-z,relro ' 'CXXFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -fPIC' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig' --enable-ltdl-convenience
[root@s03-prxy squid]#
Squid Cache: Version 4.8
Service Name: squid
This binary uses OpenSSL 1.0.2k-fips 26 Jan 2017. For legal restrictions on distribution see https://www.openssl.org/source/license.html
configure options: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--exec_prefix=/usr' '--libexecdir=/usr/lib64/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid' '--disable-dependency-tracking' '--enable-follow-x-forwarded-for' '--enable-auth' '--enable-auth-basic=DB,LDAP,NCSA,NIS,PAM,POP3,RADIUS,SASL,SMB,getpwnam,fake' '--enable-auth-ntlm=fake' '--enable-auth-digest=file,LDAP,eDirectory' '--enable-auth-negotiate=kerberos,wrapper' '--enable-external-acl-helpers=wbinfo_group,kerberos_ldap_group,LDAP_group,delayer,file_userip,SQL_session,unix_group,session,time_quota' '--enable-cache-digests' '--enable-cachemgr-hostname=localhost' '--enable-delay-pools' '--enable-epoll' '--enable-icap-client' '--enable-ident-lookups' '--enable-linux-netfilter' '--enable-removal-policies=heap,lru' '--enable-snmp' '--enable-storeio=aufs,diskd,ufs,rock' '--enable-wccpv2' '--enable-esi' '--enable-security-cert-generators' '--enable-security-cert-validators' '--enable-icmp' '--with-aio' '--with-default-user=squid' '--with-filedescriptors=16384' '--with-dl' '--with-openssl' '--enable-ssl-crtd' '--with-pthreads' '--with-included-ltdl' '--disable-arch-native' '--without-nettle' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic' 'LDFLAGS=-Wl,-z,relro ' 'CXXFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -fPIC' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig' --enable-ltdl-convenience
[root@s03-prxy squid]#
*****************
access.log extract:
[root@s03-prxy squid]# tail -f /var/log/squid/access.log | grep 10.231.0.20
1579879519.778 3539 10.231.0.200 TCP_TUNNEL/200 4974 CONNECT clients1.google.com:443 - HIER_DIRECT/172.217.15.206 -
1579879519.779 4340 10.231.0.200 TCP_TUNNEL/200 3490 CONNECT www.google.com:443 - HIER_DIRECT/172.217.8.132 -
1579879524.530 114397 10.231.0.200 TCP_TUNNEL_ABORTED/200 2051 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/34.218.169.26 -
1579879541.929 6131038 10.231.0.20 TCP_TUNNEL_ABORTED/200 1544733 CONNECT outlook.office365.com:443 - HIER_DIRECT/52.96.87.194 -
1579879541.929 4712050 10.231.0.20 TCP_TUNNEL_ABORTED/200 226325 CONNECT outlook.office365.com:443 - HIER_DIRECT/40.97.190.2 -
1579879541.944 126301 10.231.0.20 TCP_TUNNEL_ABORTED/200 27260 CONNECT outlook.office365.com:443 - HIER_DIRECT/52.96.33.82 -
1579879541.944 862124 10.231.0.20 TCP_TUNNEL_ABORTED/200 1061225 CONNECT outlook.office365.com:443 - HIER_DIRECT/52.96.88.18 -
1579879546.091 106 10.231.0.20 TCP_TUNNEL_ABORTED/200 4357 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879546.925 817 10.231.0.20 TCP_TUNNEL/200 17155 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879568.080 11 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879568.432 350 10.231.0.20 TCP_TUNNEL/200 7353 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879571.803 121672 10.231.0.20 TCP_TUNNEL/200 14037 CONNECT login.windows.net:443 - HIER_DIRECT/40.126.3.35 -
1579879576.554 69 10.231.0.20 TCP_MISS/304 449 GET http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab? - HIER_DIRECT/8.252.64.254 -
1579879576.645 69 10.231.0.20 TCP_MISS/304 449 GET http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab? - HIER_DIRECT/8.252.64.254 -
1579879579.790 5275 10.231.0.200 TCP_TUNNEL/200 4088 CONNECT safebrowsing.googleapis.com:443 - HIER_DIRECT/172.217.8.74 -
1579879580.975 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879580.976 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879580.976 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879580.976 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879581.049 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879581.050 71 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879584.088 68045 10.231.0.20 TCP_TUNNEL/200 5636 CONNECT config.edge.skype.com:443 - HIER_DIRECT/13.107.3.128 -
1579879586.050 14003 10.231.0.200 TCP_TUNNEL/200 7371 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879589.994 48 10.231.0.20 TCP_MISS/200 1978 GET http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D - HIER_DIRECT/72.21.91.29 application/ocsp-response
1579879590.031 455 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879590.596 563 10.231.0.20 TCP_TUNNEL/200 7556 CONNECT sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879593.377 118087 10.231.0.20 TCP_TUNNEL_ABORTED/200 1987 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879611.227 69 10.231.0.202 TCP_MISS/304 449 GET http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab? - HIER_DIRECT/8.252.64.254 -
1579879611.312 69 10.231.0.202 TCP_MISS/304 259 GET http://crl.pki.goog/GTS1O1.crl - HIER_DIRECT/172.217.3.131 -
1579879612.106 336 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879612.585 477 10.231.0.20 TCP_TUNNEL/200 7700 CONNECT sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879613.465 48 10.231.0.20 TCP_MISS/200 1978 GET http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D - HIER_DIRECT/72.21.91.29 application/ocsp-response
1579879613.729 190 10.231.0.20 TCP_MISS/200 2597 GET http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQphfxhPb4vsBIPXkIOTJ7D1Z79fAQUCP4ln3TqhwTCvLuOqDhfM8bRbGUCEy0ABoRa5qu8lnR3dcQAAAAGhFo%3D - HIER_DIRECT/104.18.24.243 application/ocsp-response
1579879615.429 73 10.231.0.20 TCP_MISS/200 2597 GET http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQirwAcgHViBybgyJMa7KdCHDISOgQUenuMwc%2FnoMoc1Gv6%2B%2BEzww8aop0CExYAAvvgLxYAucV3A0IAAAAC%2B%2BA%3D - HIER_DIRECT/104.18.24.243 application/ocsp-response
1579879615.601 510 10.231.0.20 TCP_TUNNEL_ABORTED/200 7961 CONNECT login.microsoftonline.com:443 - HIER_DIRECT/20.190.131.98 -
1579879615.769 151 10.231.0.20 TCP_TUNNEL/200 39 CONNECT fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879615.921 149 10.231.0.20 TCP_TUNNEL/200 39 CONNECT fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879616.936 117994 10.231.0.202 TCP_TUNNEL_ABORTED/200 1987 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879627.471 10590 10.231.0.200 TCP_TUNNEL/200 2135 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879629.024 15981 10.231.0.20 TCP_TUNNEL_ABORTED/200 35500 CONNECT webdir0a.online.lync.com:443 - HIER_DIRECT/52.112.64.14 -
1579879639.086 0 10.231.0.20 NONE/503 0 CONNECT lyncdiscoverinternal.aaaaair.com:443 - HIER_NONE/- -
1579879639.087 0 10.231.0.20 TCP_MISS/503 4569 GET http://lyncdiscoverinternal.aaaaair.com/? - HIER_NONE/- text/html
1579879639.211 114 10.231.0.20 TCP_MISS/200 789 GET http://lyncdiscover.aaaaair.com/? - HIER_DIRECT/200.46.240.179 application/vnd.microsoft.rtc.autodiscover+xml
1579879644.031 29867 10.231.0.20 TCP_TUNNEL_ABORTED/200 23372 CONNECT webdir0a.online.lync.com:443 - HIER_DIRECT/52.112.64.14 -
1579879644.529 114376 10.231.0.200 TCP_TUNNEL_ABORTED/200 1987 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879661.924 451876 10.231.0.20 TCP_TUNNEL_ABORTED/200 8663 CONNECT outlook.office365.com:443 - HIER_DIRECT/52.96.33.82 -
1579879665.721 66079 10.231.0.202 TCP_TUNNEL/200 6277 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/3.227.84.245 -
1579879675.921 72 10.231.0.202 TCP_MISS/200 256 GET http://http.00.a.sophosxl.net/V3/01/cynl.tbbtyr.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879676.722 65561 10.231.0.202 TCP_TUNNEL/200 7269 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/3.227.84.245 -
1579879681.592 13173 10.231.0.200 TCP_TUNNEL/200 6761 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879695.487 15 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879695.599 110 10.231.0.20 TCP_TUNNEL/200 17155 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879699.006 59919 10.231.0.20 NONE/503 0 CONNECT lyncdiscover.aaaaair.com:443 - HIER_NONE/- -
1579879699.006 59714 10.231.0.20 NONE/503 0 CONNECT abs.aaaaair.com:443 - HIER_NONE/- -
1579879705.254 212866 10.231.0.20 TCP_TUNNEL/200 10722 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/34.234.127.160 -
1579879705.255 209910 10.231.0.20 TCP_TUNNEL/200 12951 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/34.234.127.160 -
1579879713.373 118074 10.231.0.20 TCP_TUNNEL_ABORTED/200 605 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879716.652 11 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879716.713 59 10.231.0.20 TCP_TUNNEL/200 7401 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879724.032 72 10.231.0.200 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879734.719 66296 10.231.0.200 TCP_TUNNEL/200 6101 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/3.227.84.245 -
1579879736.935 117987 10.231.0.202 TCP_TUNNEL_ABORTED/200 605 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879737.777 11 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879737.940 161 10.231.0.20 TCP_TUNNEL/200 7353 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879754.531 68 10.231.0.200 TCP_MISS/304 259 GET http://crl.pki.goog/gsr2/gsr2.crl - HIER_DIRECT/172.217.3.131 -
1579879759.398 321 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879759.922 522 10.231.0.20 TCP_TUNNEL/200 7556 CONNECT sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879761.075 16921 10.231.0.200 TCP_TUNNEL/200 7350 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879764.529 114383 10.231.0.200 TCP_TUNNEL_ABORTED/200 605 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879778.623 8111 10.231.0.200 TCP_TUNNEL/200 774 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879781.400 324 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879781.883 481 10.231.0.20 TCP_TUNNEL/200 7700 CONNECT sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879782.075 142 10.231.0.20 TCP_TUNNEL/200 39 CONNECT fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879782.225 146 10.231.0.20 TCP_TUNNEL/200 39 CONNECT fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879800.250 0 10.231.0.20 NONE/503 0 CONNECT lyncdiscoverinternal.aaaaair.com:443 - HIER_NONE/- -
1579879800.251 0 10.231.0.20 TCP_MISS/503 4569 GET http://lyncdiscoverinternal.aaaaair.com/? - HIER_NONE/- text/html
1579879800.256 5 10.231.0.20 TCP_MISS/200 789 GET http://lyncdiscover.aaaaair.com/? - HIER_DIRECT/200.46.240.179 application/vnd.microsoft.rtc.autodiscover+xml
1579879801.905 72 10.231.0.200 TCP_MISS/200 262 GET http://http.00.a.sophosxl.net/V3/01/jjj.tbbtyr.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879808.540 72 10.231.0.20 TCP_MISS/200 262 GET http://http.00.a.sophosxl.net/V3/01/jjj.tbbtyr.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879809.335 72 10.231.0.20 TCP_MISS/200 367 GET http://http.00.a.sophosxl.net/V3/01/jjj.tfgngvp.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879809.400 72 10.231.0.20 TCP_MISS/200 256 GET http://http.00.a.sophosxl.net/V3/01/sbagf.tbbtyrncvf.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879809.763 72 10.231.0.20 TCP_MISS/200 252 GET http://http.00.a.sophosxl.net/V3/01/btf.tbbtyr.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879809.835 8004 10.231.0.200 TCP_TUNNEL/200 1205 CONNECT www.google.com:443 - HIER_DIRECT/172.217.8.132 -
1579879810.279 72 10.231.0.20 TCP_MISS/200 256 GET http://http.00.a.sophosxl.net/V3/01/rapelcgrq-goa0.tfgngvp.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879814.061 72 10.231.0.20 TCP_MISS/200 252 GET http://http.00.a.sophosxl.net/V3/01/prageny.fbcubf.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879814.061 72 10.231.0.20 TCP_MISS/200 252 GET http://http.00.a.sophosxl.net/V3/01/prageny.fbcubf.pbz.m/ - HIER_DIRECT/3.225.217.224 -
^C
[root@s03-prxy squid]#
--
---------------------
Erick Perez
Quadrian Enterprises S.A. - Panama, Republica de Panama
Skype chat: eaperezh
WhatsApp IM: +507-6675-5083
---------------------
1579879519.778 3539 10.231.0.200 TCP_TUNNEL/200 4974 CONNECT clients1.google.com:443 - HIER_DIRECT/172.217.15.206 -
1579879519.779 4340 10.231.0.200 TCP_TUNNEL/200 3490 CONNECT www.google.com:443 - HIER_DIRECT/172.217.8.132 -
1579879524.530 114397 10.231.0.200 TCP_TUNNEL_ABORTED/200 2051 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/34.218.169.26 -
1579879541.929 6131038 10.231.0.20 TCP_TUNNEL_ABORTED/200 1544733 CONNECT outlook.office365.com:443 - HIER_DIRECT/52.96.87.194 -
1579879541.929 4712050 10.231.0.20 TCP_TUNNEL_ABORTED/200 226325 CONNECT outlook.office365.com:443 - HIER_DIRECT/40.97.190.2 -
1579879541.944 126301 10.231.0.20 TCP_TUNNEL_ABORTED/200 27260 CONNECT outlook.office365.com:443 - HIER_DIRECT/52.96.33.82 -
1579879541.944 862124 10.231.0.20 TCP_TUNNEL_ABORTED/200 1061225 CONNECT outlook.office365.com:443 - HIER_DIRECT/52.96.88.18 -
1579879546.091 106 10.231.0.20 TCP_TUNNEL_ABORTED/200 4357 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879546.925 817 10.231.0.20 TCP_TUNNEL/200 17155 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879568.080 11 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879568.432 350 10.231.0.20 TCP_TUNNEL/200 7353 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879571.803 121672 10.231.0.20 TCP_TUNNEL/200 14037 CONNECT login.windows.net:443 - HIER_DIRECT/40.126.3.35 -
1579879576.554 69 10.231.0.20 TCP_MISS/304 449 GET http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab? - HIER_DIRECT/8.252.64.254 -
1579879576.645 69 10.231.0.20 TCP_MISS/304 449 GET http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab? - HIER_DIRECT/8.252.64.254 -
1579879579.790 5275 10.231.0.200 TCP_TUNNEL/200 4088 CONNECT safebrowsing.googleapis.com:443 - HIER_DIRECT/172.217.8.74 -
1579879580.975 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879580.976 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879580.976 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879580.976 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879581.049 72 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879581.050 71 10.231.0.202 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879584.088 68045 10.231.0.20 TCP_TUNNEL/200 5636 CONNECT config.edge.skype.com:443 - HIER_DIRECT/13.107.3.128 -
1579879586.050 14003 10.231.0.200 TCP_TUNNEL/200 7371 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879589.994 48 10.231.0.20 TCP_MISS/200 1978 GET http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D - HIER_DIRECT/72.21.91.29 application/ocsp-response
1579879590.031 455 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879590.596 563 10.231.0.20 TCP_TUNNEL/200 7556 CONNECT sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879593.377 118087 10.231.0.20 TCP_TUNNEL_ABORTED/200 1987 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879611.227 69 10.231.0.202 TCP_MISS/304 449 GET http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab? - HIER_DIRECT/8.252.64.254 -
1579879611.312 69 10.231.0.202 TCP_MISS/304 259 GET http://crl.pki.goog/GTS1O1.crl - HIER_DIRECT/172.217.3.131 -
1579879612.106 336 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879612.585 477 10.231.0.20 TCP_TUNNEL/200 7700 CONNECT sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879613.465 48 10.231.0.20 TCP_MISS/200 1978 GET http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D - HIER_DIRECT/72.21.91.29 application/ocsp-response
1579879613.729 190 10.231.0.20 TCP_MISS/200 2597 GET http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQphfxhPb4vsBIPXkIOTJ7D1Z79fAQUCP4ln3TqhwTCvLuOqDhfM8bRbGUCEy0ABoRa5qu8lnR3dcQAAAAGhFo%3D - HIER_DIRECT/104.18.24.243 application/ocsp-response
1579879615.429 73 10.231.0.20 TCP_MISS/200 2597 GET http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQirwAcgHViBybgyJMa7KdCHDISOgQUenuMwc%2FnoMoc1Gv6%2B%2BEzww8aop0CExYAAvvgLxYAucV3A0IAAAAC%2B%2BA%3D - HIER_DIRECT/104.18.24.243 application/ocsp-response
1579879615.601 510 10.231.0.20 TCP_TUNNEL_ABORTED/200 7961 CONNECT login.microsoftonline.com:443 - HIER_DIRECT/20.190.131.98 -
1579879615.769 151 10.231.0.20 TCP_TUNNEL/200 39 CONNECT fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879615.921 149 10.231.0.20 TCP_TUNNEL/200 39 CONNECT fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879616.936 117994 10.231.0.202 TCP_TUNNEL_ABORTED/200 1987 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879627.471 10590 10.231.0.200 TCP_TUNNEL/200 2135 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879629.024 15981 10.231.0.20 TCP_TUNNEL_ABORTED/200 35500 CONNECT webdir0a.online.lync.com:443 - HIER_DIRECT/52.112.64.14 -
1579879639.086 0 10.231.0.20 NONE/503 0 CONNECT lyncdiscoverinternal.aaaaair.com:443 - HIER_NONE/- -
1579879639.087 0 10.231.0.20 TCP_MISS/503 4569 GET http://lyncdiscoverinternal.aaaaair.com/? - HIER_NONE/- text/html
1579879639.211 114 10.231.0.20 TCP_MISS/200 789 GET http://lyncdiscover.aaaaair.com/? - HIER_DIRECT/200.46.240.179 application/vnd.microsoft.rtc.autodiscover+xml
1579879644.031 29867 10.231.0.20 TCP_TUNNEL_ABORTED/200 23372 CONNECT webdir0a.online.lync.com:443 - HIER_DIRECT/52.112.64.14 -
1579879644.529 114376 10.231.0.200 TCP_TUNNEL_ABORTED/200 1987 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879661.924 451876 10.231.0.20 TCP_TUNNEL_ABORTED/200 8663 CONNECT outlook.office365.com:443 - HIER_DIRECT/52.96.33.82 -
1579879665.721 66079 10.231.0.202 TCP_TUNNEL/200 6277 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/3.227.84.245 -
1579879675.921 72 10.231.0.202 TCP_MISS/200 256 GET http://http.00.a.sophosxl.net/V3/01/cynl.tbbtyr.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879676.722 65561 10.231.0.202 TCP_TUNNEL/200 7269 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/3.227.84.245 -
1579879681.592 13173 10.231.0.200 TCP_TUNNEL/200 6761 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879695.487 15 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879695.599 110 10.231.0.20 TCP_TUNNEL/200 17155 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879699.006 59919 10.231.0.20 NONE/503 0 CONNECT lyncdiscover.aaaaair.com:443 - HIER_NONE/- -
1579879699.006 59714 10.231.0.20 NONE/503 0 CONNECT abs.aaaaair.com:443 - HIER_NONE/- -
1579879705.254 212866 10.231.0.20 TCP_TUNNEL/200 10722 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/34.234.127.160 -
1579879705.255 209910 10.231.0.20 TCP_TUNNEL/200 12951 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/34.234.127.160 -
1579879713.373 118074 10.231.0.20 TCP_TUNNEL_ABORTED/200 605 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879716.652 11 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879716.713 59 10.231.0.20 TCP_TUNNEL/200 7401 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879724.032 72 10.231.0.200 TCP_MISS/200 257 GET http://http.00.a.sophosxl.net/V3/01/jjj.pbcnnve.pbz.m/ - HIER_DIRECT/3.222.35.82 -
1579879734.719 66296 10.231.0.200 TCP_TUNNEL/200 6101 CONNECT 4.sophosxl.net:443 - HIER_DIRECT/3.227.84.245 -
1579879736.935 117987 10.231.0.202 TCP_TUNNEL_ABORTED/200 605 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879737.777 11 10.231.0.20 TCP_TUNNEL_ABORTED/200 188 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879737.940 161 10.231.0.20 TCP_TUNNEL/200 7353 CONNECT sip.aaaaair.com:443 - HIER_DIRECT/200.46.240.195 -
1579879754.531 68 10.231.0.200 TCP_MISS/304 259 GET http://crl.pki.goog/gsr2/gsr2.crl - HIER_DIRECT/172.217.3.131 -
1579879759.398 321 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879759.922 522 10.231.0.20 TCP_TUNNEL/200 7556 CONNECT sipfed.online.lync.com:443 - HIER_DIRECT/52.112.65.75 -
1579879761.075 16921 10.231.0.200 TCP_TUNNEL/200 7350 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879764.529 114383 10.231.0.200 TCP_TUNNEL_ABORTED/200 605 CONNECT dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443 - HIER_DIRECT/52.10.0.129 -
1579879778.623 8111 10.231.0.200 TCP_TUNNEL/200 774 CONNECT pssgui.aaaa.travel.airservices.svcs.entsvcs.com:443 - HIER_DIRECT/146.123.20.137 -
1579879781.400 324 10.231.0.20 TCP_TUNNEL_ABORTED/200 6298 CONNECT sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879781.883 481 10.231.0.20 TCP_TUNNEL/200 7700 CONNECT sipfed0a.online.lync.com:443 - HIER_DIRECT/52.112.64.11 -
1579879782.075 142 10.231.0.20 TCP_TUNNEL/200 39 CONNECT fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879782.225 146 10.231.0.20 TCP_TUNNEL/200 39 CONNECT fs.aaaaair.com:443 - HIER_DIRECT/94.188.209.80 -
1579879800.250 0 10.231.0.20 NONE/503 0 CONNECT lyncdiscoverinternal.aaaaair.com:443 - HIER_NONE/- -
1579879800.251 0 10.231.0.20 TCP_MISS/503 4569 GET http://lyncdiscoverinternal.aaaaair.com/? - HIER_NONE/- text/html
1579879800.256 5 10.231.0.20 TCP_MISS/200 789 GET http://lyncdiscover.aaaaair.com/? - HIER_DIRECT/200.46.240.179 application/vnd.microsoft.rtc.autodiscover+xml
1579879801.905 72 10.231.0.200 TCP_MISS/200 262 GET http://http.00.a.sophosxl.net/V3/01/jjj.tbbtyr.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879808.540 72 10.231.0.20 TCP_MISS/200 262 GET http://http.00.a.sophosxl.net/V3/01/jjj.tbbtyr.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879809.335 72 10.231.0.20 TCP_MISS/200 367 GET http://http.00.a.sophosxl.net/V3/01/jjj.tfgngvp.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879809.400 72 10.231.0.20 TCP_MISS/200 256 GET http://http.00.a.sophosxl.net/V3/01/sbagf.tbbtyrncvf.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879809.763 72 10.231.0.20 TCP_MISS/200 252 GET http://http.00.a.sophosxl.net/V3/01/btf.tbbtyr.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879809.835 8004 10.231.0.200 TCP_TUNNEL/200 1205 CONNECT www.google.com:443 - HIER_DIRECT/172.217.8.132 -
1579879810.279 72 10.231.0.20 TCP_MISS/200 256 GET http://http.00.a.sophosxl.net/V3/01/rapelcgrq-goa0.tfgngvp.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879814.061 72 10.231.0.20 TCP_MISS/200 252 GET http://http.00.a.sophosxl.net/V3/01/prageny.fbcubf.pbz.m/ - HIER_DIRECT/3.225.217.224 -
1579879814.061 72 10.231.0.20 TCP_MISS/200 252 GET http://http.00.a.sophosxl.net/V3/01/prageny.fbcubf.pbz.m/ - HIER_DIRECT/3.225.217.224 -
^C
[root@s03-prxy squid]#
---------------------
Erick Perez
Quadrian Enterprises S.A. - Panama, Republica de Panama
Skype chat: eaperezh
WhatsApp IM: +507-6675-5083
---------------------
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
