Re: [squid-users] apple software updates

Quoting Henrik Nordstrom <henrik@henriknordstrom.net>:

> tis 2007-02-27 klockan 09:00 -0500 skrev
> dhottinger@harrisonburg.k12.va.us:
>
>> Ok.
>> Here is the snippet from my logfile with log_mime_hdrs on.
>>
>> 1172582734.353 955773 10.40.7.184 TCP_MISS/200 91768 GET
>> http://swscan.apple.com/content/catalogs/index-1.sucatalog -
>> DIRECT/17.250.248.95 text/plain ALLOW "Shareware/Freeware"
>> [User-Agent: CFNetwork/129.16\r\nAccept: */*\r\nAccept-Language:
>> en\r\nAccept-Encoding: gzip, deflate\r\nX-Software-Update-Session-Id:
>> U1jRJMoop0HfigV+\r\nConnection: keep-alive\r\nHost:
>> swscan.apple.com\r\n] [HTTP/1.0 200 OK\r\nAccept-Ranges:
>> bytes\r\nDate: Tue, 27 Feb 2007 13:09:38 GMT\r\nContent-Length:
>> 388177\r\nContent-Type: text/plain\r\nConnection:
>> keep-alive\r\nServer: Apache/1.3.33 (Darwin)\r\nLast-Modified: Thu, 22
>> Feb 2007 23:37:02 GMT\r\nETag: "1052102-5ec51-45de291e"\r\nVia: 1.1
>> netcache04 (NetCache NetApp/5.5R6)\r\n\r]
>
> Looks fine to me.
>
>> 1172583132.390 211 10.40.7.184 TCP_MISS/304 246 GET
>> http://swscan.apple.com/content/catalogs/index-1.sucatalog -
>> DIRECT/17.250.248.95 - ALLOW "Shareware/Freeware" [User-Agent:
>> CFNetwork/129.16\r\nAccept: */*\r\nAccept-Language:
>> en\r\nAccept-Encoding: gzip, deflate\r\nX-Software-Update-Session-Id:
>> ai8CuNQop0FFIW5Z\r\nIf-Modified-Since: Thu, 22 Feb 2007 23:37:02
>> GMT\r\nConnection: keep-alive\r\nHost: swscan.apple.com\r\n] [HTTP/1.0
>> 304 Not Modified\r\nDate: Tue, 27 Feb 2007 13:32:12 GMT\r\nConnection:
>> keep-alive\r\nServer: Apache/1.3.33 (Darwin)\r\nETag:
>> "1052102-5ec51-45de291e"\r\nVia: 1.1 netcache02 (NetCache
>> NetApp/5.5R6)\r\n\r]
>
> This too. Here the data was already cached by the client (10.40.7.184).
>
> Somewhere in the updates catalog on the client you should find this
> index-1.sucatalog file. Please verify that the checksums match what is
> expected
>
> file size: 388177
> md5: 421aa448ea6b5bb3b5c79dea468b3223
> sha1: 7eba515ea094634d6e67164a73e35c5e8d91ae10
>
>
> Note: the above is only valid until Apple updates the catalog.
>
> note:
> Regards
> Henrik
>

In case I can muddy up things, here is a softwareupdate on a 10.3.9
server (softwareupdates work on 10.3.9 apples):
1172596300.775 467 10.40.0.3 TCP_REFRESH_HIT/200 41683 GET
http://swscan.apple.com/scanningpoints/scanningpointX.xml -
DIRECT/17.250.248.95 text/xml ALLOW "Shareware/Freeware" [Host:
swscan.apple.com\r\nConnection: keep-alive\r\nAccept:
*/*\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us\r\n]
[HTTP/1.0 200 OK\r\nAccept-Ranges: bytes\r\nDate: Mon, 26 Feb 2007
16:03:50 GMT\r\nContent-Length: 41335\r\nContent-Type:
text/xml\r\nConnection: keep-alive\r\nServer: Apache/1.3.33
(Darwin)\r\nLast-Modified: Wed, 21 Feb 2007 23:01:27 GMT\r\nETag:
"55bbca-a177-45dccf47"\r\nVia: 1.1 netcache04 (NetCache
NetApp/5.5R6)\r\n\r]
1172596305.205 1362 10.40.0.3 TCP_MISS/200 110648 POST
http://swquery.apple.com/WebObjects/SoftwareUpdatesServer -
DIRECT/17.250.248.93 text/xml ALLOW "Business, Computing/Internet"
[Host: swquery.apple.com\r\nConnection: close\r\nAccept:
*/*\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language:
en-us\r\nContent-Type:
application/x-www-form-urlencoded\r\nContent-Length: 12165\r\n]
[HTTP/1.0 200 Apple\r\nDate: Tue, 27 Feb 2007 17:11:43
GMT\r\nContent-Length: 110257\r\nContent-Type:
text/xml;charset=UTF-8\r\nExpires: Tue, 27 Feb 2007 17:11:43
GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate,
max-age=0\r\nConnection: keep-alive\r\nServer: Apache/1.3.33
(Darwin)\r\npragma: no-cache\r\nVia: 1.1 netcache05 (NetCache
NetApp/5.5R6)\r\n\r]

Looks like they go to the sam server, but different directorys? I
thought maybe the software update servers were different which would
lead me to believe one was doing something funny with packets or
something. But that isnt the case.

-- 
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools