sarg

It only works if your user is authenticated and reported as such by squid in the access.log. In that case, simply call sarg with option -u followed by the user's ID.

If your users are not authenticated and are identified by their IP address in the reports, then the current version of sarg cannot filter them as the filter is applied before the empty user name is replaced by the IP address.

Frederic