What about some sort of netflow service? In the ISP world the radius server does accounting and it's a bit different ntop have a network probe that might help you: https://www.ntop.org/ I am using routers to do this kind of a task instead of the proxy. The other option is to use QOS between the squid machine. You probably can add some rules dynamically with some kind of CAP and to mark the clients connection with iptables. I don't remember if iptables have quota or not. And you can use some kind of ipset that can be updated dynamically by an external software. The client will be added to the "too much user" mark and then he can download and upload with a speed CAP/QOS. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: eliezer@xxxxxxxxxxxx -----Original Message----- From: squid-users <squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx> On Behalf Of Heiler Bemerguy Sent: Monday, March 25, 2019 9:15 PM To: squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: How to catch a big spender ? Hail, We've seen some high upload bandwidth usage on our router graphs and we'd like to know what was happening at that time... Any tools or tricks to know that? I bet most of you have had this "curiosity" already too lol -- Best Regards, Heiler Bemerguy - CINBESA Analista de Redes, Wi-Fi, Virtualização e Serviços Internet (55) 91 98151-4894 _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
