Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Sarg package for pfsense

    Scheduled Pinned Locked Moved pfSense Packages
    467 Posts 99 Posters 500.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DonnyD
      Donny
      last edited by

      @marcelloc:

      Can you check if /var/log/dansguardian folder exists?

      Hello Marcelloc, I already check dansguardian. It is still exists. see some screenshot

      Sarg_Danguardian_log_file_not_exist.png_thumb
      Sarg_Danguardian_log_file_not_exist.png

      1 Reply Last reply Reply Quote 0
      • DonnyD
        Donny
        last edited by

        @Donny:

        @marcelloc:

        Can you check if /var/log/dansguardian folder exists?

        Hello Marcelloc, I already check dansguardian. It is still exists. see some screenshot

        Ok anyway I will try again.

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          @Donny:

          Ok anyway I will try again.

          Run sarg cmd on console and check if it returns errors.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • DonnyD
            Donny
            last edited by

            @marcelloc:

            @Donny:

            Ok anyway I will try again.

            Run sarg cmd on console and check if it returns errors.

            I just clean install pfsense again. Installed dansguardian and squid3. I checked at system log file I saw many error there.

            Apr 17 20:02:46 php: /pkg_mgr_install.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '126', the output was '/usr/local/etc/rc.d/dansguardian: Permission denied'
            Apr 17 20:02:46 php: : New alert found:
            Apr 17 20:02:46 check_reload_status: Reloading filter
            Apr 17 20:07:39 check_reload_status: Syncing firewall
            Apr 17 20:07:39 php: /pkg_mgr_install.php: Beginning package installation for squid3.
            Apr 17 20:07:40 check_reload_status: Syncing firewall
            Apr 17 20:08:46 check_reload_status: Syncing firewall
            Apr 17 20:08:46 php: /pkg_mgr_install.php: Creating squid cache subdirs in /var/squid/cache

            Apr 17 20:08:46
            php: /pkg_mgr_install.php: The command '/usr/local/sbin/squid -k shutdown' returned exit code '1', the output was '2012/04/17 20:08:46| WARNING: (B) '::/0' is a subnetwork of (A) '::/0' 2012/04/17 20:08:46| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable 2012/04/17 20:08:46| WARNING: You should probably remove '::/0' from the ACL named 'all' 2012/04/17 20:08:46| ERROR: Directive 'upgrade_http0.9' is obsolete. 2012/04/17 20:08:46| cache_cf.cc(381) parseOneConfigFile: squid.conf:2931 unrecognized: 'broken_vary_encoding''

            Apr 17 20:08:51
            php: /pkg_mgr_install.php: The command '/usr/local/sbin/squid -k kill' returned exit code '1', the output was '2012/04/17 20:08:51| WARNING: (B) '::/0' is a subnetwork of (A) '::/0' 2012/04/17 20:08:51| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable 2012/04/17 20:08:51| WARNING: You should probably remove '::/0' from the ACL named 'all' 2012/04/17 20:08:51| ERROR: Directive 'upgrade_http0.9' is obsolete. 2012/04/17 20:08:51| cache_cf.cc(381) parseOneConfigFile: squid.conf:2931 unrecognized: 'broken_vary_encoding''

            Apr 17 20:08:51
            php: /pkg_mgr_install.php: The command '/usr/local/sbin/squid -z' returned exit code '1', the output was '2012/04/17 20:08:51| WARNING: (B) '::/0' is a subnetwork of (A) '::/0' 2012/04/17 20:08:51| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable 2012/04/17 20:08:51| WARNING: You should probably remove '::/0' from the ACL named 'all' 2012/04/17 20:08:51| ERROR: Directive 'upgrade_http0.9' is obsolete. 2012/04/17 20:08:51| cache_cf.cc(381) parseOneConfigFile: squid.conf:2931 unrecognized: 'broken_vary_encoding''

            After I tried to reboot pfsense and squid has some files missing again.

            Apr 17 20:33:28 php: : Not calling package sync code for dependency squidcache of squid3 because some include files are missing.
            Apr 17 20:33:28 php: : Not calling package sync code for dependency squidnac of squid3 because some include files are missing.
            Apr 17 20:33:28 php: : Not calling package sync code for dependency squidtraffic of squid3 because some include files are missing.
            Apr 17 20:33:28 php: : Not calling package sync code for dependency squidupstream of squid3 because some include files are missing.
            Apr 17 20:33:28 php: : Not calling package sync code for dependency squidreverse of squid3 because some include files are missing.
            Apr 17 20:33:28 php: : Not calling package sync code for dependency squidauth of squid3 because some include files are missing.
            Apr 17 20:33:28 php: : Not calling package sync code for dependency squidusers of squid3 because some include files are missing.

            I did not install SARG yet because I want to find out some bugs between Dandsguardian and Squid.

            I will running SARG cmd on console after I have installed SARG.

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              config squid options, save
              config dansguardian save

              check if errors persists.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • DonnyD
                Donny
                last edited by

                another error found

                Apr 17 21:13:53 php: : XML error: XML_ERR_NAME_REQUIRED at line 1 in /usr/local/pkg/dansguardian_users_footer.xml
                Apr 17 21:13:53 php: : XML error: Invalid document end at line 99 in /usr/local/pkg/dansguardian_users_header.xml
                Apr 17 21:13:53 php: : XML error: Invalid document end at line 100 in /usr/local/pkg/dansguardian_ips_header.xml

                Both of squid and dansguardian used proxy interface: LAN (no loopback interface selected)

                If I use squid as "Transparent proxy" I got this error as below but if I don't use squid as "Transparent proxy" I don't get this error (as you said before try to use squid without "Transparent proxy").

                Of course, I have installed NAT rules to redirect from squid port 3128 to DG port 8080.

                Apr 17 21:52:39 php: : SQUID is installed but not started. Not installing "nat" rules.
                Apr 17 21:52:39 php: : SQUID is installed but not started. Not installing "pfearly" rules.
                Apr 17 21:52:39 php: : SQUID is installed but not started. Not installing "filter" rules.

                So it mean that using squid in transparent mode still have some bugs and problem.

                config squid options, save
                config dansguardian, save

                No error found in the system log.

                1 Reply Last reply Reply Quote 0
                • H
                  Hugovsky
                  last edited by

                  Another problem:

                  "Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 62998077 bytes) in /usr/local/www/sarg_frame.php on line 52"

                  When tryed to load Sites and users.

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    @Hugovsky:

                    Another problem:

                    "Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 62998077 bytes) in /usr/local/www/sarg_frame.php on line 52"

                    When tryed to load Sites and users.

                    It's a pfsense php memory limitation, you can work around this by accessing HTML reports directly http://pfsense_IP/sarg-reports/

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • C
                      ccesario
                      last edited by

                      Hmmm,
                      Maybe memory_limit change can solve this.

                      Something like ini_set("memory_limit","256M");

                      Right Marcello!? :P

                      Carlos

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        @ccesario:

                        Hmmm,
                        Maybe memory_limit change can solve this.

                        Something like ini_set("memory_limit","256M");

                        Right Marcello!? :P

                        The memory check prevents ini settings above it's limit(128 for 32 and 256 for 64 bits)

                        The page is asking 62998077bytes above current limit. This value can be changed on amd64 code but not on i386.

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • C
                          ccesario
                          last edited by

                          @marcelloc:

                          The memory check prevents ini settings above it's limit(128 for 32 and 256 for 64 bits)

                          The page is asking 62998077bytes. This value is higher then 512 hard limit for PHP on pfsense.

                          Opsss…. ignore my post :P

                          Thanks by info!

                          Carlos

                          1 Reply Last reply Reply Quote 0
                          • H
                            Hugovsky
                            last edited by

                            @marcelloc:

                            @Hugovsky:

                            Another problem:

                            "Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 62998077 bytes) in /usr/local/www/sarg_frame.php on line 52"

                            When tryed to load Sites and users.

                            It's a pfsense php memory limitation, you can work around this by accessing HTML reports directly http://pfsense_IP/sarg-reports/

                            thanks

                            1 Reply Last reply Reply Quote 0
                            • K
                              klamath
                              last edited by

                              Hi Marcelloc
                              Could you sort all reports for Bytes Reverse???

                              HP ProLiant MicroServer N40L - 2GB - 250G HD - 3 NIC Intel PRO/1000 MT Gigabit PCI
                              pfSense 2.0.1-RELEASE (amd64)

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                @klamath:

                                Hi Marcelloc
                                Could you sort all reports for Bytes Reverse???

                                You can sort sarg by clicking on column header.

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • K
                                  klamath
                                  last edited by

                                  I mean… by default! without any click!

                                  @marcelloc:

                                  @klamath:

                                  Hi Marcelloc
                                  Could you sort all reports for Bytes Reverse???

                                  You can sort sarg by clicking on column header.

                                  HP ProLiant MicroServer N40L - 2GB - 250G HD - 3 NIC Intel PRO/1000 MT Gigabit PCI
                                  pfSense 2.0.1-RELEASE (amd64)

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    Did you tried to select bytes on user option and sort fields in reverse options on general tab?

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • K
                                      klamath
                                      last edited by

                                      @marcelloc:

                                      Did you tried to select bytes on user option and sort fields in reverse options on general tab?

                                      Yes… I did it for the first try.
                                      Can I edit the file sarg.conf on the console???

                                      now i've got this error on Redirector report page:

                                      Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 49259754 bytes) in /usr/local/www/sarg_frame.php on line 52

                                      I'm on AMD64

                                      HP ProLiant MicroServer N40L - 2GB - 250G HD - 3 NIC Intel PRO/1000 MT Gigabit PCI
                                      pfSense 2.0.1-RELEASE (amd64)

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        On amd64 it can be set to 256. I'll include it on next release.

                                        For now, use http://pfsense.IP/sarg-reports

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • H
                                          Hemingway
                                          last edited by

                                          @marcelloc
                                          First, thanks for this wonderfull Package!

                                          I have installed Squid and Sarg and both work fine. I make daily reports with the scheduler.
                                          The Syntax for daily reports is "-d date +%d/%m/%Y-date +%d/%m/%Y", but now
                                          i need weekly, monthly and annual reports. What's the right Syntax to make this?

                                          Thanks, Hemingway

                                          1 Reply Last reply Reply Quote 0
                                          • I
                                            IGIdeus
                                            last edited by

                                            @marcelloc:

                                            Did you tried to select bytes on user option and sort fields in reverse options on general tab?

                                            Hi,
                                            I also have a problem with sorting Top users & Users report.
                                            I tried mentioned option but it doesn't work.
                                            I need to manually change config file with options:

                                            TAG:  topuser_sort_field field normal/reverse

                                            #      Sort field for the Topuser Report.
                                            #      Allowed fields: USER CONNECT BYTES TIME

                                            topuser_sort_field BYTES REVERSE

                                            TAG:  user_sort_field field normal/reverse

                                            #      Sort field for the User Report.
                                            #      Allowed fields: SITE CONNECT BYTES TIME

                                            user_sort_field BYTES REVERSE

                                            But when I change the configuration in GUI then everything is reverted to NORMAL.
                                            Could you please extend the "User Sort Field" with "BYTES(reverse)"?

                                            Best regards
                                            IGIdeus

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.