Hello,
Your question is a very common issue that we see. The transaction logs probably won't help you improve the performance of your WAAS network.
The best place to start is by running a "show stat conn pass-through"
This will give you a list of all the connections that are in Pass-through and some indication of why they are in pass-through or PT. Here is a short sample
192.98.108.239:2731 192.98.203.55:88 N/A PT App Cfg
192.98.48.6:3268 155.64.230.190:185870:1a:64:c7:57:f0 PT Asymmetric
192.98.108.221:1241 192.98.48.41:1258 N/A PT In Progress
192.64.188.55:8000 172.16.64.130:2006 N/A PT In Progress
192.64.230.107:80 172.16.64.241:3111 N/A PT No Peer
192.127.38.51:1521 192.98.150.30:3583 N/A PT In Progress
You can see a few of the reasons for the PT connections and each one of them have different reasons.
PT App CFG, means that that there is a classifier for that TCP port and it is configured for Pass-through.
The remaining PT can be caused by WCCP misconfiguration at the site you are looking at or the remote location.
To find the issue, you need to do traceroute from the client to server and server to client. Follow that path and make sure it is hitting a L3 interface on a router with WCCP enabled. Also check your WCCP ACL to make sure your traffic is permitted.
For WAAS to optimize a connection, WCCP has to happen four times. The SYN at the local and remote router and the same for the SYN/ACK.
I hope this is helpful.
Tom Jardin
