hello all, i'm in the process of attempting to do packet level accounting for users behind a squid proxy. in a few simple tests, i came to the conclusion that access.log does not log the actual tcp/ip header as part of the byte count, nor does it account for the syn, syn-ack, ack packets when squid requests a page from an http server.
i would image that the larger community does not want or need this type of accounting, however, i do need it to ascertain exactly how much traffic traversed an expensive link and attribute it to the client. as i read through the archives, i ran accross something called connection-pinning, and if i understand it correctly :-), it allows for the originating client's address to be used by squid? is this possible? is there a way to attribute every packet that squid sends (assuming no icp) to a client? many, many thanks! charles shick
