Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Sarg package for pfsense

    Scheduled Pinned Locked Moved pfSense Packages
    467 Posts 99 Posters 498.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      der.tale
      last edited by

      Hi there,

      I think I found two minor bugs with the sarg configuration:

      When configuring exclude strings, the resulting configuration entry looks like this:

      exclude_string"testasd'              # note the missing space and the wrong quote character at the end

      Also, when setting exclude_codes, these are written to the correct configuration file (exclude_codes.conf), but in sarg.conf "exclude_code" (without the .conf", probably the default) is referenced.

      Another side note / question:

      I'm combining squid and squidGuard. This works quite good so far. My squidGuard config defines several ACLs. After generating some sample reports I noticed that blocked URLs are not marked as blocked in the Squid log file. At least not in the same way when "Plain Squid" would be blocking them. This throws Sarg off, and blocked URLs are included in the list of visited websites without a special marker that these were blocked / redirected.

      Is there any way around that? I tried to remove these entries with exclude_strings or exclude_codes (to remove all 403 redirects) - which did not work because of the mentioned bugs. But aside from these options, is there any other way?

      Thanks for the good work on the package btw!

      Manuel

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        der.tale,

        Thanks for your feedback. I've pushed version 0.4.2_1 with these fixes.

        check if you can use exclude codes and exclude_string now.

        att,
        Marcello Coutinho

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • M
          miodzicho
          last edited by

          @marcelloc:

          Check options you selected on sarg gui and try again.

          I have tried to enable and disable options in GUI, tried as well schedule forced.
          Unfortunately still no go.Error is the same.

          2.4.4-RELEASE (amd64)
          built on Thu Sep 20 09:03:12 EDT 2018
          FreeBSD 11.2-RELEASE-p3
          QOTOM Q355G4 - i5 8G RAM 128G SSD

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            miodzicho,

            Try sarg with the same options I use.

            att,
            Marcello Coutinho

            sarg_options.png
            sarg_options.png_thumb

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • M
              miodzicho
              last edited by

              @marcelloc:

              miodzicho,

              Try sarg with the same options I use.

              att,
              Marcello Coutinho

              Marcello, you are star :) It works as it should. Many thanks !

              2.4.4-RELEASE (amd64)
              built on Thu Sep 20 09:03:12 EDT 2018
              FreeBSD 11.2-RELEASE-p3
              QOTOM Q355G4 - i5 8G RAM 128G SSD

              1 Reply Last reply Reply Quote 0
              • D
                der.tale
                last edited by

                marcelloc,

                thanks for the quick fix, it works now as expected!

                der.tale

                1 Reply Last reply Reply Quote 0
                • J
                  jikjik101
                  last edited by

                  i can't find the sarg menu in the gui. i can't find it under Status after an upgrade to 2.3.2 pkg v.0.4.2_1

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    try to reinstall

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • J
                      jikjik101
                      last edited by

                      already did but the same. reinstall and reboot give the same result. no menu.  ???

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        The menu is there, I have no idea what is happening with your system.

                        did you tried to uninstall and then install?

                        if you want, the url /pkg_edit.php?xml=sarg.xml

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • J
                          jikjik101
                          last edited by

                          the first thing I did is an upgrade.
                          When it failed, i tried to do a reinstall - no web menu
                          Then I did another upgrade - no web menu
                          Reboot - no webmenu
                          Uninstall and reinstall - no webmenu
                          Reboot - no webmenu

                          I will try to reinstall with no LAN clients connected.

                          Edit…
                          After nth time of reinstallation, the menu just popped out. what a relief.

                          sarg.jpg
                          sarg.jpg_thumb
                          sarg2.jpg
                          sarg2.jpg_thumb

                          1 Reply Last reply Reply Quote 0
                          • DonnyD
                            Donny
                            last edited by

                            Hello all,

                            Has anyone successes with Sarg report full username from LDAP server of windows 2008?

                            Thank u

                            1 Reply Last reply Reply Quote 0
                            • K
                              klamath
                              last edited by

                              Since last update, there is no more squidguard redirector!
                              The configs remains the same… What happen?

                              HP ProLiant MicroServer N40L - 2GB - 250G HD - 3 NIC Intel PRO/1000 MT Gigabit PCI
                              pfSense 2.0.1-RELEASE (amd64)

                              1 Reply Last reply Reply Quote 0
                              • K
                                kira
                                last edited by

                                Great Job for this Package!

                                1 Reply Last reply Reply Quote 0
                                • DonnyD
                                  Donny
                                  last edited by

                                  @Donny:

                                  Hello all,

                                  Has anyone successes with Sarg report full username from LDAP server of windows 2008?

                                  Thank u

                                  Hello marcelloc and all

                                  So quiet here, any news over SARG

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    @Donny:

                                    So quiet here, any news over SARG

                                    No new tests yet.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • R
                                      root2020
                                      last edited by

                                      To get this right, LDAP is not working correctly in sarg pfsense package to report usernames in AD on a Windows 2008 Domain? I have been trying to get this to work and have failed. Is everyone having the same issues?

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kleyverson
                                        last edited by

                                        questions

                                        I am Brazilian and I can not speak English so I'm translating it in google translator. I hope you understand and help me.

                                        How do I set up the flap schedule? Can anyone give me an example?
                                        My difficulty is the option Sarg ARGS
                                        can anyone give me an example with a correct date, please?
                                        Which option to use in Action after sarg?
                                        After configuring the View Report tab work? For my gives error saying I need to set the flap schedule

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          @kleyverson:

                                          questions

                                          I am Brazilian and I can not speak English so I'm translating it in google translator. I hope you understand and help me.

                                          How do I set up the flap schedule? Can anyone give me an example?
                                          My difficulty is the option Sarg ARGS
                                          can anyone give me an example with a correct date, please?
                                          Which option to use in Action after sarg?
                                          After configuring the View Report tab work? For my gives error saying I need to set the flap schedule

                                          kleyverson,

                                          post without google on portuguese forum :)

                                          Lá já tem um tópico para o sarg.

                                          att,
                                          Marcello Coutinho

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • gwhynottG
                                            gwhynott
                                            last edited by

                                            Hi Marcello,

                                            I logged into the pfsence box last week (the 15th)  before heading out on vacation (how bad is that? not in the best practices guide anyway…)  and noticed there was an update for SARG.  I applied it.

                                            I logged in again today to generate a SARG report on a site.  I noticed SARG hasn't worked since the upgrade.  Seems 'topuser_sort_field' is causing it some grief,  (wondering if that was the modification you did when I suggested it as a feature add upon your release of the package...)..

                                            has anyone else had this issue and/or is there anything you would like to see?  I'll hold off on a re-install or touching anything  till i hear back from you.

                                            take care,
                                            greg

                                            May 15 10:46:52 gw-master php: /pkg_mgr_install.php: Beginning package installation for Sarg.
                                            May 15 10:46:55 gw-master php: /pkg_mgr_install.php: [sarg] sarg_xmlrpc_sync.php is starting.
                                            May 15 10:46:55 gw-master php: /pkg_mgr_install.php: [sarg] sarg_xmlrpc_sync.php is starting.
                                            May 15 11:00:01 gw-master php: : Sarg: force refresh now with '' args and both action after sarg finish.
                                            May 15 11:00:01 gw-master php: : The command '/usr/local/bin/sarg ' returned exit code '1', the output was 'SARG: Unknown sort criterion "NORMAL" for parameter "topuser_sort_field"'
                                            May 15 11:00:01 gw-master php: : executing squid log rotate after sarg.
                                            May 15 12:00:01 gw-master php: : Sarg: force refresh now with '' args and both action after sarg finish.
                                            May 15 12:00:01 gw-master php: : The command '/usr/local/bin/sarg ' returned exit code '1', the output was 'SARG: Unknown sort criterion "NORMAL" for parameter "topuser_sort_field"'
                                            May 15 12:00:01 gw-master php: : executing squid log rotate after sarg.

                                            May 22 16:23:44 gw-master php: /pkg_edit.php: The command '/usr/local/bin/sarg ' returned exit code '1', the output was 'SARG: Unknown sort criterion "NORMAL" for parameter "topuser_sort_field"'
                                            May 22 16:23:44 gw-master php: /pkg_edit.php: executing squid log rotate after sarg.
                                            w with '' args and  action after sarg finish.
                                            Apr 24 21:00:00 gw-master php: : Sarg: force refresh now with '' args and  action after sarg finish.
                                            Apr 24 22:00:01 gw-master php: : Sarg: force refresh now with '' args and  action after sarg finish.
                                            Apr 24 23:00:00 gw-master php: : Sarg: force refresh now with '' args and  action after sarg finish.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.