"Chris Barnes" <[EMAIL PROTECTED]> writes: > Now I use Calamaris or Webalizer to generate a report based on Squid > usage so we can see how much people are downloading. It seems to work > well.
I assume this is going to give you http payload (or http header and payload) of downloaded pages, ie there might be some overhead in lower layer protocols that won't be counted. I'd also check whether it includes traffic in both directions, or just the download direction. > For the month of november (from the 1st to today the 19th) our ISP tells > us we have already downloaded 2.2gigs. Is 2.2gigs really just downloaded traffic? My ISP adds down and uploads together to get the monthly traffic. > Webalizer tells me that we have only downloaded 780megs for November > (from 1st to 19th). > And when I do a report on the MySQL database it tells me we have only > downloaded about 450megs! Are you logging INPUT OUTPUT and FORWARD? I've heard MySQL isn't very good, could that be the problem? * > I did a few tests setting up another chain and added some rules to > Netfilter, anyway, I reset the firewall counters and downloaded a 512kb > file. > > The web browser reported the file size as slightly larger than 512kb and > the byte counters in Netfilter said the data that came through the > specific chain I set up for the download was only about 446kb. No idea, I would have thought the firewall would record slightly more traffic than the file size. What's the file size after you've downloaded it, 512kb? Some web servers and browsers can negotiate to compress/decompress downloads on the fly, but I don't know how common it is. * trolling trolling trolling, thou the streets are swolling -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
