[squid-users] Squid "access.log" problem.

Hi,
I am using squid 2.5 STABLE on Redhat Linux 9 working
fine.
I am using squid access logs file with "SARG" for
getting user reports.

My ISP (bandwidth supplier) have given me control
panel which shows that data dowmload is about 250 MB
and Upload about 3500 MB. Total 3750 MB.

SARG report "IN-CACHE-OUT" shows me total
1132 MB which is based on squid 'acsess.log' file.
This does not match with ISP's usage report that is
3750 MB. I am paying My ISP on data transfer.

As per my knowledge squid access log does not
differential data uploading and downloading. It gives
data transfer. I am using transperent squid proxy with
redirecting port 80 to 3128.

If my squid access log is 100% correct I would like to
fight with my ISP with squid "access.log" as base.

Squid is http proxy, so this difference in data
transfer might be from port other than 80, 3128.
such as ssh, ftp or some non http port.
My nmap report gives following results.

#############
Port State Service
22/tcp open ssh
80/tcp open http
111/tcp open sunrpc
3128/tcp open squid-http
6000/tcp open X11
###########

I am unable to check if there is any data transfer
from ssh port.
Can you please help me why this difference in data
transfer (about 2600 MB)? and to detect where this
difference in data goes?

I don't know whether this is squid problem OR sarg
problem. But feel squid problem since SARG only uses
squid "access.log" file scanning.

Help appreciated.
Thanks for support

                
__________________________________
Do you Yahoo!?
Yahoo! Mail - 250MB free storage. Do more. Manage less.
http://info.mail.yahoo.com/mail_250
Received on Thu Jan 27 2005 - 08:59:06 MST