[squid-users] Data-Transfer on blocked URL's?

[Peter Schulz-Kraus]

Hello,
how can I understand this?

In access.Log every TCP/DENIED line shows
about 1400 bytes Data-Transfer.
So I had 226 MB (!) TCP/DENIED-Traffic during
the last month. (200 Users)

What does squid do here?

Greetings, Peter