diff --git a/docs/DEVICE-LOGGING.md b/docs/DEVICE-LOGGING.md
index c9d2939..f17a98f 100644
--- a/docs/DEVICE-LOGGING.md
+++ b/docs/DEVICE-LOGGING.md
@@ -48,6 +48,12 @@ logread -f | grep -Ei '(marge|preset)'
 ```
 This is particularly useful for debugging preset synchronization and service redirection issues.
 
+For HTTPS / connection-refused debugging (e.g. `Curl 7, http 0`), drop the speaker's loopback chatter so only outbound calls remain visible:
+```bash
+logread -f | grep -v '127.0.0.1'
+```
+The speaker generates a steady stream of localhost-to-localhost HTTP traffic between its internal services; filtering it out makes the actual cloud / AfterTouch attempts (the ones that matter when diagnosing redirect or TLS issues) easy to read in real time.
+
 ---
 
 ## 2. Traffic Logging & Interception
diff --git a/docs/guides/TROUBLESHOOTING.md b/docs/guides/TROUBLESHOOTING.md
index a170ecc..9e73733 100644
--- a/docs/guides/TROUBLESHOOTING.md
+++ b/docs/guides/TROUBLESHOOTING.md
@@ -109,7 +109,7 @@ iperf3 -c 192.168.1.1  # If iperf server available
 
 **Symptoms:**
 
-In the speaker's log (`logread -f` over SSH):
+In the speaker's log (see [DEVICE-LOGGING.md](../DEVICE-LOGGING.md#1-accessing-system-logs-requires-root) for the SSH/`logread` setup — the filtered command `logread -f | grep -v '127.0.0.1'` is what you want here):
 
 ```
 SimpleURLFetcher: retry needed, Curl 7, http 0