[squid-users] How to catch a big spender ?

[eliezer at ngtech.co.il]

What about some sort of netflow service?
In the ISP world the radius server does accounting and it's a bit different
ntop have a network probe that might help you:
https://www.ntop.org/

I am using routers to do this kind of a task instead of the proxy.
The other option is to use QOS between the squid machine.
You probably can add some rules dynamically with some kind of CAP and to mark the clients connection with iptables.
I don't remember if iptables have quota or not.
And you can use some kind of ipset that can be updated dynamically by an external software.
The client will be added to the "too much user" mark and then he can download and upload with a speed CAP/QOS.

Eliezer

----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer at ngtech.co.il


-----Original Message-----
From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of Heiler Bemerguy
Sent: Monday, March 25, 2019 9:15 PM
To: squid-users at lists.squid-cache.org
Subject: [squid-users] How to catch a big spender ?

Hail,

We've seen some high upload bandwidth usage on our router graphs and we'd like to know what was happening at that time...

Any tools or tricks to know that? I bet most of you have had this "curiosity" already too lol


-- 
Best Regards,

Heiler Bemerguy - CINBESA
Analista de Redes, Wi-Fi,
Virtualização e Serviços Internet
(55) 91 98151-4894

_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users