CREATE TABLE `squid_log` (
  `id` int(10) unsigned NOT NULL auto_increment,
  `user_ip` varchar(15) NOT NULL default '',
  `size` int(10) unsigned NOT NULL default '0',
  `time` datetime NOT NULL default '0000-00-00 00:00:00',
  `free_flag` tinyint(3) unsigned NOT NULL default '0',
  PRIMARY KEY  (`id`),
  KEY `user_ip_index` (`user_ip`),
  KEY `datetime_index` (`time`)
) TYPE=MyISAM;

SELECT user_ip, SUM(`size`) AS 'f' FROM squid_log
WHERE free_flag = 1 group by user_ip ORDER BY 'f' DESC

SELECT s.user_ip, SUM(s.size) AS 'total', SUM(l.size) AS 'free', SUM(l2.size) AS 'paid' FROM squid_log s
LEFT JOIN squid_log l ON s.id = l.id AND l.free_flag = 1
LEFT JOIN squid_log l2 ON s.id = l2.id AND l2.free_flag = 0
WHERE DAYOFMONTH(s.time) = 29 AND MONTH(s.time) = 09 AND YEAR(s.time) = 2005
group by s.user_ip
ORDER BY 'total' DESC