Hello everybody.

I'm running Squid 3.1.15 on Fedora 15 in intercepting mode. There is a cisco router as gateway and it is redirecting packets destined to 80/tcp port to squid via gre (Wccp2 neighborship).

The problem is, now I have a hard time checking out who is currently utilizing bandwidth via cache flow from router, as all the requests come from squid's source address.

Is it possible to check from shell whos downloading and what at that moment? I think it should be possible, because I use squid's access.log parser (lightsquid) and it shows me how much mB/gB-s user have downloaded from Internet.

Hi...

I think one of your best solution is to install tools like iftop in the squid box to monitor directly in it.

1 members found this post helpful.

You're right. From first I wasn't able to comprehend iftop output well, but now it's neat
The only thing I had to do (since I have squid working in intercepting mode via wccp) to filter out itself via "-f !host" filter. Else I'd see all connections from original source and also from its source aswell.

Hi Flang3r

Nice to hear. Well, regarding the filtering, I am sure you already got yourself a hint

PS: Mind to give me reputation point? thanks in advance

1 members found this post helpful.