Tracking user's download
 

Hi,
We have squid server and generate user's usage report daily with help of Sarg. It shows browsing activities of users nicely. But, some users are downloading stuff using bittorrent clients, emails(big attachments), wget.. etc which is not included in Squid Reports.

What is the best approach to get information about such downloads? if possible, with details like who, when, downloaded/got what?

well tools like ntop can show how much traffic has hit each client, but you'll not be able to mine into the bittorrent data itself, just know that it was (probably) bittorrent (depending on port ranges and such) and it was x many megabytes in the day / hour etc...