One of our customers complained that bandwidth is calculated incorrectly. I see in WHM that he used 611MB in last 3 days. AWStats and Webalizer shows that traffic is near 242MB. I know that traffic in WHM includes also POP3 and FTP traffic. But customer not used POP3 (no entries in maillog*) and upload only near 50KB via ftp (information obtained from xferlog).
How can I recalculate traffic consumed by customer manually and argue him that he really consumed 611MB?