[HOWTO] Squid/Lightsquid Logs with MAC addresses - pfSense 2.3.2

[Shelter]

Hi everybody,

last night (after about 4 pots of coffee) I figured out, how to log MAC addresses instead of IPs with Squid and Lightsquid.

DISCLAIMER: Backup your config before playing around. This comes with absolutely no warranties.

After installing and configuring Squid and Lightsquid follow these steps:

• In the WebGUI, navigate to Services / Squid Proxy Server / General Tab and Scroll down to Logging Settings

• Enable Access Logging –> Disabled

• Scroll down to the bootom of the page and click on Show advanced Options

• Paste the code below into the Custom ACLS (Before Auth)-Box

• Save and restart Squid Service

logfile_rotate 90
debug_options rotate=90
logformat iptomac %ts.%03tu %6tr %>eui %Ss/%03>Hs %<st %rm="" %ru="" %[="">a %Sh/%<a %mt<br="">access_log /var/squid/logs/access.log iptomac[/code]

I attached a screenshot (MACs shortened) so you get an idea of how it will look.

Now, I'll see if I can get rid of that **** stuck beacon issue.
Time for another pot of coffee...

Cheers!
![lightsquid.jpg](/public/_imported_attachments_/1/lightsquid.jpg)
![lightsquid.jpg_thumb](/public/_imported_attachments_/1/lightsquid.jpg_thumb)</a></st>

[navalgandhi1989gmail.com]

Just Superb  ;D

[olivedu56]

hi

merci beaucoup ;) ;) ;) ;)

[gatop]

The idea is right but the syntax is wrong. On 2.4.4-RELEASE-p2:

• Proxy Server -> General settings -> "Enable Access Logging" disabled (this prevents the default syntax to be loaded)
• Advanced features ("Show Advanced Options") -> Custom Options (Before Auth) ->

logfile_rotate 30
debug_options rotate=30
logformat squid %{%d/%m/%Y_%H:%M:%S}tl %>eui %6tr %>a %Ss/%03>Hs %<st %rm %ru %un %Sh/%<A %mt
access_log /var/squid/logs/access_custom.log

Save and reload Squid. You'll find the log in /var/squid/logs as defined in the general options page. Obviously You can customize the options according to your needs (timestamp, logrotate days, etc...)

[bassc]

Hello Friends...Yeah this method works. Squid is logging with mac address. But i'd like to see logs with mac on Light Squid. When i apply your method Light Squid does not show logs and also Light Squid wants me to enable "Enable Acces Logging" checkbox on Squid. If i download the log file to my computer and open with notepad i can see the logs with mac....But as i said i can not see on Light Squid....Is there any way to see the logs with mac on Light Squid?