Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Sarg package for pfsense

    Scheduled Pinned Locked Moved pfSense Packages
    467 Posts 99 Posters 507.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sujyo1
      last edited by

      Here is my Sarg in action!! In system log no sarg error and date is correct when i force update sarg reports but In Sarg View reports and Sarg real time are showing old reports!!

      2.1.5-RELEASE (i386)
      built on Mon Aug 25 07:44:26 EDT 2014
      FreeBSD 8.3-RELEASE-p16

      Intel(R) Atom(TM) CPU N280 @ 1.66GHz
      2 CPUs: 1 package(s) x 1 core(s) x 2 HTT threads

      $ squid -v
      Squid Cache: Version 2.7.STABLE9

      Sarg 2.3.6_2 pkg v.0.6.3

      SYSTEM LOG:

      Apr 18 02:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish.

      Apr 18 01:17:47 php: /pkg_edit.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish.
      Apr 18 01:17:47 check_reload_status: Syncing firewall
      Apr 18 01:17:40 php: /pkg_edit.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish.

      SARG VIEW REPORT:

      Squid User Access Report
      FILE/PERIOD CREATION DATE USERS BYTES AVERAGE
      2015Mar23-2015Mar23 Mon Mar 23 23:00:24 2015 3 58,608 19,536
      2015Mar22-2015Mar22 Sun Mar 22 23:00:27 2015 18 4,130,379,537 229,465,529
      2015Mar21-2015Mar21 Sat Mar 21 23:00:33 2015 37 3,529,371,665 95,388,423
      2015Mar20-2015Mar20 Fri Mar 20 23:00:28 2015 32 3,079,436,066 96,232,377
      2015Mar19-2015Mar19 Thu Mar 19 23:00:29 2015 19 4,513,906,771 237,574,040
      2015Mar18-2015Mar18 Wed Mar 18 23:00:26 2015 17 2,775,934,852 163,290,285
      2015Mar17-2015Mar17 Tue Mar 17 23:00:24 2015 19 1,386,602,417 72,979,074
      2015Mar16-2015Mar16 Mon Mar 16 23:00:23 2015 15 1,118,870,024 74,591,33

      SARG REALTIME:

      DATE/TIME IP/NAME USERID TYPE ACCESSED SITE
      2015-03-23 00:13 10.10.10.171 - GET captive.apple.com
      2015-03-23 00:09 10.10.10.33 - GET i.ytimg.com
      2015-03-22 23:59 10.10.10.171 - GET captive.apple.com
      2015-03-22 23:59 10.10.10.33 - GET safesecuredownload.com
      2015-03-22 23:59 10.10.10.33 - GET gomotrak.com

      1 Reply Last reply Reply Quote 0
      • F
        firetxelo
        last edited by

        @KOM:

        Try this from the shell:

        rm -r /usr/local/sarg-reports
        ln -s /usr/pbi/sarg-i386/local/sarg-reports /usr/local/sarg-reports

        Use ln -s /usr/pbi/sarg-amd64/local/sarg-reports /usr/local/sarg-reports if you have 64-bit build.

        This fix the problem… try it

        Att,

        Marcelo Moraes

        http://mmoraessolucoes.com.br

        1 Reply Last reply Reply Quote 0
        • V
          VictorCheng
          last edited by

          @marcelloc:

          @namek:

          Hello, Is it possible to change the unit from bytes to something higher? like KB or MB?

          Sure. :)

          Just select Show values in reports using abbreviation on sarg general tab.

          Hello, I no longer see the Show values options in Sarg (pfSense 2.2.2, Sarg 0.6.4). I see nothing like that on the General tab.
          On the Users tab I can select User Sort Field: BYTES(default), SITE normal, CONNECT and TIME.
          I want to display Sarg reports in Megabytes instead of Bytes.
          Help anyone?

          1 Reply Last reply Reply Quote 0
          • R
            Requiring
            last edited by

            @firetxelo:

            @KOM:

            Try this from the shell:

            rm -r /usr/local/sarg-reports
            ln -s /usr/pbi/sarg-i386/local/sarg-reports /usr/local/sarg-reports

            Use ln -s /usr/pbi/sarg-amd64/local/sarg-reports /usr/local/sarg-reports if you have 64-bit build.

            This fix the problem… try it

            thank's its work on my pfsense…. ;) ;) ;)

            1 Reply Last reply Reply Quote 0
            • R
              robatwork
              last edited by

              Hello all,

              My sarg installation is in a bit of a mess. Rather than trying to fix what I think are multiple issues, I want to completely remove sarg including any logs and settings, and install it again from scratch.  I have tried an uninstall but this doesn't get rid of everything.  Any simple pointers on how to nuke sarg totally?
              thanks!

              1 Reply Last reply Reply Quote 0
              • A
                aGeekhere
                last edited by

                I get the same sarg error

                Error: Could not find report index file.
Check and save sarg settings and try to force sarg schedule.

                Has a fix been found yet?

                Never Fear, A Geek is Here!

                1 Reply Last reply Reply Quote 0
                • S
                  sujyo1
                  last edited by

                  did try all but same here…

                  Jun 10 02:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish.

                  Error: Could not find report index file.
                  Check and save sarg settings and try to force sarg schedule.

                  1 Reply Last reply Reply Quote 0
                  • D
                    ddimick
                    last edited by

                    @KOM:

                    Try this from the shell:

                    rm -r /usr/local/sarg-reports
                    ln -s /usr/pbi/sarg-i386/local/sarg-reports /usr/local/sarg-reports

                    Use ln -s /usr/pbi/sarg-amd64/local/sarg-reports /usr/local/sarg-reports if you have 64-bit build.

                    Fixed for me as well, had to perform on a brand new install.

                    1 Reply Last reply Reply Quote 0
                    • P
                      paracetamol
                      last edited by

                      Hi,
                      My SARG schedule work  half time:
                      First schedule is ok
                      Second run i have this error:

                      SARG: Period: 24 Dec 2015
                      SARG: File /usr/local/sarg-reports/2015/12/24 already exists, moved to /usr/local/sarg-reports/2015/12/24.2
                      SARG: cannot open /usr/local/sarg-reports/2015/12/24/sarg-date for writing
                      SARG:: No such file or directory

                      third run is OK

                      Have you an idea ??

                      Thanks

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        Select overwrite reports on settings tab.

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • J
                          jadog
                          last edited by

                          Can anybody tell me if it would be possible to setup Sarg to email the the reports in a viewable format? Maybe some sort of a cron job could do this?

                          1 Reply Last reply Reply Quote 0
                          • A
                            Angel_19
                            last edited by

                            Hi

                            pfSense 2.2.6
                            I received the following error message:

                            php: sarg.php: The command 'export LC_ALL=C && /usr/pbi/sarg-i386/bin/sarg ' returned exit code '1', the output was 'SARG: Records in file: 1732, reading: 0.00%^MSARG: cannot open /usr/local/sarg-reports/2016/03/21/sarg-date for writing SARG:: No such file or directory SARG: Records in file: 1732, reading: 100.00%'

                            What could be the problem?

                            1 Reply Last reply Reply Quote 0
                            • N
                              Nytridr
                              last edited by

                              Its been discontinued.

                              https://forum.pfsense.org/index.php?topic=110405.msg614621#msg614621

                              1 Reply Last reply Reply Quote 0
                              • S
                                spiv
                                last edited by

                                How do i remove Sarg on pfsense 2.3
                                Any command that i can type to remove it. I can see the menu link and keep on having crash report on the package. Please look at the attached screenshot.

                                sarg1.png
                                sarg1.png_thumb
                                sarg2.png
                                sarg2.png_thumb

                                1 Reply Last reply Reply Quote 0
                                • S
                                  speedup
                                  last edited by

                                  @spiv:

                                  How do i remove Sarg on pfsense 2.3
                                  Any command that i can type to remove it. I can see the menu link and keep on having crash report on the package. Please look at the attached screenshot.

                                  I have some problem too. anybody help?

                                  un 24 12:00:00 	php 		/usr/local/www/sarg.php: The command 'export LC_ALL=C && /usr/local/bin/sarg -d `date +%d/%m/%Y`' returned exit code '127', the output was '/usr/local/bin/sarg: not found'
                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    speedup
                                    last edited by

                                    no one help?

                                    1 Reply Last reply Reply Quote 0
                                    • N
                                      Nachtfalke
                                      last edited by

                                      Don't know what the correct way ist, but you should:

                                      
rm -rf /usr/local/pkg/sarg*
rm -rf /usr/local/www/sarg*

                                      Don't know exactly where the reports are stored so probably first search for them and then delete these folders.

                                      search:

                                      
find / -iname "*sarg*"

                                      Then remove it with "rm -rf"

                                      Further install "cron" package and then delete all existing cronjobs which contain something with "sarg" in it.

                                      Delete the remaining "sarg" entries from your config. In my environment this is:

                                      
vi /cf/conf/config.xml

                                      There I deleted the pars beginning/ending with:

                                      
<sarg></sarg>
<sarguser></sarguser>
<sargschedule></sargschedule>
<sargrealtime></sargrealtime>

                                      So after rebooting everything should be ok. Of courxe, please crwate a backup of the configu before you start deleting something.

                                      Regards.

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        techsecure
                                        last edited by

                                        It is an awesome tool, sad it is not available now.

                                        1 Reply Last reply Reply Quote 0
                                        • Y
                                          yosvany.ramos @marcelloc
                                          last edited by

                                          @marcelloc

                                          Hello, Marcelo:

                                          Do you know how to install SARG in
                                          Hello, Marcelo:

                                          Do you know how to install SARG in pfsense 2.4.4, FreeBSD 11.2-RELEASE-p3 ?

                                          Thanks,
                                          Yosvany

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.