probably its not squid related question . you can see access.log but in case if thy are downloading through squid in other case if thy are using remote desktop then remote desktop don't allow them to download any thing from computer may b thy are using telnet ssh or some FTP if that computer is not configured web try to watch system event logs in control panel administrative area On 7/19/05, Behrang Saeedzadeh <behrangsa@xxxxxxxxx> wrote: > Hi > > Somebady has got the username/password of our customer's service > machine and has downloaded more than 70gigs of movies in just one > month. > > We want to know from which IP this user has logged-in to the system > (it's possible that he's loggin in with Remote Desktop). Does anybody > know how can we do this? > > Best Regards, > -- > > Behrang Saeedzadeh > http://www.jroller.com/page/behrangsa > -- Syed Kashif Ali Bukhari Network Associate Asia Net Cell :- +92-345-4244813 , +92-300-4295604 Ph +92-42-111-111-202 Fax +92-42-5840905 MSN:- kbukhari@xxxxxxx ; kashif.bukhari@xxxxxxxxxxx http://asia.net.pk , http://asiatec.biz