Sarg package for pfsense

dlawley

@dlawley:

Warning: file_get_contents(/usr/local/www/sarg-reports/index.html): failed to open stream: No such file or directory in /usr/local/www/sarg_frame.php on line 41

Sarg Realtime appears to be working ok

Are you running full or nanobsd install?

I'll check folder creation code.

I dunno. Still not showing the service as "running" , but I am finally starting to see some data. I just pulled another reinstall, not sure if that helped.

marcelloc

Sarg service will only show as running only on report updates, It's run by cron.

Better if I remove it from service list.

marcelloc

Dlawley,

Can you try to run sarg on console/ssh and post the response?

dlawley

@marcelloc:

Dlawley,

Can you try to run sarg on console/ssh and post the response?


[2.0.1-RELEASE][root@pfsense.localdomain]/root(3): sarg
SARG: Records in file: 10434, reading: 100.00%
SARG: Successful report generated on /usr/local/www/sarg-reports/2012/03/31
[2.0.1-RELEASE][root@pfsense.localdomain]/root(4):

Had to make the "after action" command to rotate and restart to get more data..

Since I seem to be getting some data of various degrees I think I may flush out sarg report directory and let things restart. I can't say for sure what I'm seeing is results from any of my changed settings.


[2.0.1-RELEASE][root@pfsense.localdomain]/root(6): sarg -z
SARG: TAG: access_log /var/squid/logs/access.log
SARG: TAG: graphs yes
SARG: TAG: output_dir /usr/local/www/sarg-reports
SARG: TAG: anonymous_output_files no
SARG: TAG: resolve_ip no
SARG: TAG: user_ip no
SARG: TAG: topuser_sort_field BYTES NORMAL
SARG: TAG: user_sort_field BYTES NORMAL
SARG: TAG: exclude_users /usr/local/etc/sarg/exclude_users.conf
SARG: TAG: exclude_hosts /usr/local/etc/sarg/exclude_hosts.conf
SARG: TAG: remove_temp_files yes
SARG: TAG: index yes
SARG: TAG: index_tree date
SARG: TAG: overwrite_report no
SARG: TAG: use_comma yes
SARG: TAG: exclude_codes /usr/local/etc/sarg/exclude_codes
SARG: TAG: report_type topusers topsites sites_users users_sites date_time denied auth_failures site_user_time_date downloads
SARG: TAG: usertab
SARG: TAG: long_url no
SARG: TAG: charset UTF-8
SARG: TAG: privacy no
SARG: TAG: dansguardian_conf
SARG: TAG: squidguard_conf
SARG: TAG: show_sarg_info no
SARG: TAG: show_sarg_logo no
SARG: TAG: www_document_root /usr/local/www
SARG: TAG: realtime_refresh_time 0
SARG: TAG: realtime_types GET,PUT,CONNECT
SARG: TAG: realtime_unauthenticated_records show
SARG: Records in file: 10490, reading: 100.00%
SARG: (info) date=31/03/2012
SARG: (info) period=2012 Mar 31
SARG: (info) outdirname=/usr/local/www/sarg-reports/2012/03/31
SARG: (info) Dansguardian report not produced because no dansguardian configuration file was provided
SARG: (info) No redirector logs provided to produce that kind of report
SARG: (info) Denied report not produced because it is empty
SARG: (info) Authentication failures report not produced because it is empty
SARG: (info) Redirector report not generated because it is empty
SARG: Successful report generated on /usr/local/www/sarg-reports/2012/03/31
[2.0.1-RELEASE][root@pfsense.localdomain]/root(7):

dlawley

Clear out the sarg report folder, flush out firefox cache. I might be ok now.. I think all links are working now.

See what tomorrow brings

tx

asterix

Get this error on reports tab

Warning: file_get_contents(/usr/local/www/sarg-reports/index.html): failed to open stream: No such file or directory in /usr/local/www/sarg_frame.php on line 41

And this in system logs

php: /pkg_edit.php: The command '/usr/local/bin/sarg ' returned exit code '1', the output was 'SARG: Records in file: 100, reading: 0.00%^MSARG: cannot open /usr/local/www/sarg-reports/2012/03/31/sarg-date for writing SARG:: No such file or directory SARG: Records in file: 100, reading: 100.00%'

dlawley

firefox and chrome show different pages/reports

marcelloc

@asterix:

Warning: file_get_contents(/usr/local/www/sarg-reports/index.html): failed to open stream: No such file or directory in /usr/local/www/sarg_frame.php on line 41

And this in system logs

php: /pkg_edit.php: The command '/usr/local/bin/sarg ' returned exit code '1', the output was 'SARG: Records in file: 100, reading: 0.00%^MSARG: cannot open /usr/local/www/sarg-reports/2012/03/31/sarg-date for writing SARG:: No such file or directory SARG: Records in file: 100, reading: 100.00%'

I've included a file check in report page. I'll do more tests before commit.

You may need to change folder permissions or empty sarg-reports folder before trying to run sarg again.

marcelloc

@Cino:

nothing is shown… I click on the button, it changes to running but nothing is displayed

Can you try to run this realtime page using firefox with firebug(network tab) enabled to see if there is any error on it.

I'm using current code on a test machine and it's showing realtime log without issues.

sarg_realtime.png_thumb

gwhynott

Hi Marcello,

Just wanted to report the latest update is working as expected on our system. Thanks again for your efforts.

I'll be watching for the email reports option. 8)

take care and have a great day,
greg

Cino

everything looks good, no errors and the page refreshes based on update frequency…. I'll keep testing..... Its probably just my box, begging for a fresh install of pfsense....lol

periko

Hi.

Does someone have test on nanobsd?

Thanks!!!

marcelloc

@periko:

Does someone have test on nanobsd?

Not yet.

periko

Went the nanobsd arrive I will help testing, thanks :)

marcelloc

@periko:

Went the nanobsd arrive I will help testing, thanks :)

squid 2.x does not log on nanobsd installs.

Are you running dansguardian?

periko

I enable logs in nanobsd and have been using sarg for a while with success, thanks!!!

marcelloc

great! :)

I'll commit squidguard functions to sarg until friday.

gwhynott

Hi Marcello,

will you (or is there) include a method to sort the reports? For example, when viewing "top sites", it sorts the list by amount of 'hits' by default, I'd like to sort by amount of data transferred if possible.

with the proliferation of web apps, hits don't really mean as much as they once did in these types of reports. as an example I've seen one user generate over 20k hits on teamviewer.com in one day.

thanks again,
greg

Cino

@gwhynott:

Hi Marcello,

will you (or is there) include a method to sort the reports? For example, when viewing "top sites", it sorts the list by amount of 'hits' by default, I'd like to sort by amount of data transferred if possible.

with the proliferation of web apps, hits don't really mean as much as they once did in these types of reports. as an example I've seen one user generate over 20k hits on teamviewer.com in one day.

thanks again,
greg

@marcelloc there is a way to sort that is built in, kinda… check the default conf file for 'TAG: sorttable path'. Javascript sorttable.js would need to be added, from http://www.kryogenix.org/code/browser/sorttable/.

marcelloc

Thanks cino.

I'm merging a contribution for squidguard reports from ccesario and then I'll take a look on it.