[squid-users] How to catch a big spender ?

[Amos Jeffries]

On 26/03/19 9:10 am, Nicolas Kovacs wrote:
> Le 25/03/2019 à 20:15, Heiler Bemerguy a écrit :
>> We've seen some high upload bandwidth usage on our router graphs and
>> we'd like to know what was happening at that time...
>>
>> Any tools or tricks to know that? I bet most of you have had this
>> "curiosity" already too lol
> 
> Here's what I use to catch bandwidth hogs in our local network:
> 
> https://www.microlinux.fr/squidanalyzer-centos-7/
> 

Please be aware that tools based on log files only include completed
transactions. They do not include information about still-active
transactions, such as CONNECT tunnels for HTTPS traffic.


To identify events where an ongoing transaction or tunnel is using
excess bandwidth one needs to use the cache manager or SNMP interfaces
of Squid. The earlier mentioned sqstat and similar tools do that.

Amos