08:44:01.447429 192.168.45.1 > 192.168.45.2: gre-proto-0x883E (gre encap) 08:44:01.447778 192.168.45.1 > 192.168.45.2: gre-proto-0x883E (gre encap) 08:44:01.448213 192.168.45.1 > 192.168.45.2: gre-proto-0x883E (gre encap) 08:44:01.448580 192.168.45.1 > 192.168.45.2: gre-proto-0x883E (gre encap)
so only packets from cisco to squid, and none coming back
but wait,
isn't it supposed to be so, that the cache box sends replies directly to the client
i did some traffic investigation on the cache and it appears, that there are connections from client to the destination web site address
but the source address of this connections is client's address so it looks like squid didn't really take care of it
212.244.a.C is the client 212.244.a.R is the router 212.244.a.S is the squid cache
i used iptraf on cache's outside interface (212.244.a.S) and it shows connections from 212.244.a.C to www.site.ip.addres
but there are only few packets going out, and again nothing coming back from the www-site
and there is still no trace in access.log
Kuba
