At one of our locations some pupils we have a great amount of traffic from internet into the local net, about 15GB a day.
I want to know, from wich user and workstation this traffic is initiated. We have Sarg running, but it does'nt show anything.
I guess, the traffic ist generated by downloading big files over https from a sharehoster. Dansguardian is also installed, but it cannot show the quantity of data coming from the internet.
Can someone recommend me a tool for analyzing the amount of traffic for https?
Thanks, Uli