I am tring to determine which web sites are being used, how frequently they are being used, how much data transfer occurs etc.., in my company network .
Now my problem when someone is watching a video; for example a video served by youtube from Facebook. I need to understand the video is opened from Facebook. I took some pcap files and examined them but couldn't find out any useful information for my case in http headers. I were excepting to find out something about facebook in http get messages for youtube but unfortunately nothing was there .
I hope I explain my case well enough. Will somebody has any advise for me?