I have noticed that a number of our PC's have the Akamai content delivery client installed on their PC, for streaming media. After doing some research, I see that the client acts similar to a Torrent client, in that it will serve chunks of downloaded data to other users in a peer fashion. I dont want to block the clients ability to connect and download, but I would like to monitor specifically the amount of data being transferred out by these clients, to see if it is worth blocking the outbound portion only.
That said, since there isnt a post action like you would see in submitting a form, how do I monitor only data being sent out (for any content type)? I have the user-agents that the clients use, but I'm not sure what additional criteria to add to the log rule to specify only outbound content.