Hi Rafael, > as if I am not mistaken the data get's written to the log > *after* each session is completed You are correct about squids access_log file, but sqtop uses squid's manager interface to report on active HTTP(S) connections. i.e for the download of a large (1GB) file, sqtop will report that item, attributed to the IP & user (if known) that originated the request, for the whole duration of the download, including current and average speed. It answers the question "who is using proxy bandwidth *right now*?" compared to other reports that analyse logs and report on historical usage. The screenshot on sqtop's page should give you an idea of what it presents: http://sqtop.googlecode.com/svn/wiki/images/scr1_ui_big.png Hopefully that makes it clearer? Regards, Chris _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users