ISP counting Squid cached traffic?

[TokyoJedi]

Hi all,

So I have a dedicated pc running pfsense/squid (transparent proxy, caching) with two NICs installed. One ethernet coming from router, the other going to a wireless access point. Sarge reports and access.log tailing indicate that caching has been working great over the past month and averaging around a 65-70% HIT rate on media requests. The problem is, however, that my ISP is charging overages like crazy this month (opened the floodgates after HITs were registering) and unless something is misconfigured I don't understand how the traffic could be this high on their monitoring while the majority of traffic had been cached according to SARG. Screenshots below:

http://i.imgur.com/QKpqNdj.png

http://i.imgur.com/mdku94f.png

If I can provide anything to help with diagnosing what may be going wrong here, by all means, please request it and I will provide what I can.

Thanks in advance!