squid input more than output?

Hello all

What does it mean when a dedicated proxy server has a lot more input than
output (it shows on the mrtg graphs), and it only happens at certain time of
the day which looks like a user pattern, is it a misconfig or security
breach?

An instance of the mrtg output is at
http://www.starwon.com.au/~vincent/mrtg.1-day.gif

Any suggestion is appreciated, thank you.

Vincent Tsang
Received on Tue Jan 04 2000 - 22:11:19 MST