I have some performance problems, because everybody is listening to the
radio. Because it's impossible to block all sites I was wondering how to
log this kind of information.
We only allow http and https traffic and log this, but if I look into the
proxy console number 15.'Show origin hosts sorted by amount of data
received by the cache' (or option 16) I see things like :

The amount of data we are talking about are gigabytes.

I can not see any logfile (common or extended, audit or access rule log)
where is logged from whome this comes from.
How do I trace this?

kind regards,