On Mon, 4 Oct 2004, Peter Schulz-Kraus wrote:
In access.Log every TCP/DENIED line shows about 1400 bytes Data-Transfer.
This is the error message telling the user access was denied.
If you are using NTLM authentication you will see quite many of these due to the nature of the NTLM authentication protocol.
So I had 226 MB (!) TCP/DENIED-Traffic during the last month. (200 Users)
Between the clients and your Squid yes. 0 of this is Internet traffic.
Regards Henrik
