Hey all, Using NTLM auth. I just set up sarg and noticed weird usernames. So, I looked in my squid log, in case they were being parsed weird and I see this: 1145472531.457 0 127.0.0.1 TCP_CLIENT_REFRESH_MISS/200 4569 GET http://server44/squid-reports/ TlRMTVNTUAACAAAAB gAGADAAAAA1gokg7p5ruRq8NyYAAAAAAAAAAFgAWAA2AAAAQwBUAEcAAgAGAEMAVABHAAEAE ABTAEUAUgBWAEUAUgA0ADQABAAOAGMAdABnAC4AYwBvAG 0AAwAgAHMAZQByAHYAZQByADQANAAuAGMAdABnAC4AYwBvAG0AAAAAAA== NONE/- text/html 1145472531.487 3 127.0.0.1 TCP_CLIENT_REFRESH_MISS/200 7502 GET http://server44/squid-reports/images/sarg.png jg authier NONE/- image/png That looks like NTLM garbage.. Can anyone confirm what is in my log file, and if it's expected? Squid Cache: Version 3.0-PRE3-20060414