Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Sarg package for pfsense

    pfSense Packages
    99
    467
    248188
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcelloc
      marcelloc last edited by

      Sarg service will only show as running only on report updates, It's run by cron.

      Better if I remove it from service list.

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • marcelloc
        marcelloc last edited by

        Dlawley,

        Can you try to run sarg on console/ssh and post the response?

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • D
          dlawley last edited by

          @marcelloc:

          Dlawley,

          Can you try to run sarg on console/ssh and post the response?

          
          [2.0.1-RELEASE][root@pfsense.localdomain]/root(3): sarg
          SARG: Records in file: 10434, reading: 100.00%
          SARG: Successful report generated on /usr/local/www/sarg-reports/2012/03/31
          [2.0.1-RELEASE][root@pfsense.localdomain]/root(4): 
          
          

          Had to make the "after action" command to rotate and restart to get more data..

          Since I seem to be getting some data of various degrees I think I may flush out sarg report directory and let things restart.  I can't say for sure what I'm seeing is results from any of my changed settings.

          
          [2.0.1-RELEASE][root@pfsense.localdomain]/root(6): sarg -z
          SARG: TAG: access_log /var/squid/logs/access.log
          SARG: TAG: graphs yes
          SARG: TAG: output_dir /usr/local/www/sarg-reports
          SARG: TAG: anonymous_output_files no
          SARG: TAG: resolve_ip no
          SARG: TAG: user_ip no
          SARG: TAG: topuser_sort_field BYTES NORMAL
          SARG: TAG: user_sort_field BYTES NORMAL
          SARG: TAG: exclude_users /usr/local/etc/sarg/exclude_users.conf
          SARG: TAG: exclude_hosts /usr/local/etc/sarg/exclude_hosts.conf
          SARG: TAG: remove_temp_files yes
          SARG: TAG: index yes
          SARG: TAG: index_tree date
          SARG: TAG: overwrite_report no
          SARG: TAG: use_comma yes
          SARG: TAG: exclude_codes /usr/local/etc/sarg/exclude_codes
          SARG: TAG: report_type topusers topsites sites_users users_sites date_time denied auth_failures site_user_time_date downloads
          SARG: TAG: usertab
          SARG: TAG: long_url no
          SARG: TAG: charset UTF-8
          SARG: TAG: privacy no
          SARG: TAG: dansguardian_conf
          SARG: TAG: squidguard_conf
          SARG: TAG: show_sarg_info no
          SARG: TAG: show_sarg_logo no
          SARG: TAG: www_document_root /usr/local/www
          SARG: TAG: realtime_refresh_time 0
          SARG: TAG: realtime_types GET,PUT,CONNECT
          SARG: TAG: realtime_unauthenticated_records show
          SARG: Records in file: 10490, reading: 100.00%
          SARG: (info) date=31/03/2012
          SARG: (info) period=2012 Mar 31
          SARG: (info) outdirname=/usr/local/www/sarg-reports/2012/03/31
          SARG: (info) Dansguardian report not produced because no dansguardian configuration file was provided
          SARG: (info) No redirector logs provided to produce that kind of report
          SARG: (info) Denied report not produced because it is empty
          SARG: (info) Authentication failures report not produced because it is empty
          SARG: (info) Redirector report not generated because it is empty
          SARG: Successful report generated on /usr/local/www/sarg-reports/2012/03/31
          [2.0.1-RELEASE][root@pfsense.localdomain]/root(7): 
          
          
          1 Reply Last reply Reply Quote 0
          • D
            dlawley last edited by

            Clear out the sarg report folder, flush out firefox cache.  I might be ok now..  I think all links are working now.

            See what tomorrow brings

            tx

            1 Reply Last reply Reply Quote 0
            • A
              asterix last edited by

              Get this error on reports tab

              Warning: file_get_contents(/usr/local/www/sarg-reports/index.html): failed to open stream: No such file or directory in /usr/local/www/sarg_frame.php on line 41

              And this in system logs

              php: /pkg_edit.php: The command '/usr/local/bin/sarg ' returned exit code '1', the output was 'SARG: Records in file: 100, reading: 0.00%^MSARG: cannot open /usr/local/www/sarg-reports/2012/03/31/sarg-date for writing SARG:: No such file or directory SARG: Records in file: 100, reading: 100.00%'

              1 Reply Last reply Reply Quote 0
              • D
                dlawley last edited by

                firefox and chrome show different pages/reports

                1 Reply Last reply Reply Quote 0
                • marcelloc
                  marcelloc last edited by

                  @asterix:

                  Warning: file_get_contents(/usr/local/www/sarg-reports/index.html): failed to open stream: No such file or directory in /usr/local/www/sarg_frame.php on line 41

                  And this in system logs

                  php: /pkg_edit.php: The command '/usr/local/bin/sarg ' returned exit code '1', the output was 'SARG: Records in file: 100, reading: 0.00%^MSARG: cannot open /usr/local/www/sarg-reports/2012/03/31/sarg-date for writing SARG:: No such file or directory SARG: Records in file: 100, reading: 100.00%'

                  I've included a file check in report page. I'll do more tests before commit.

                  You may need to change folder permissions or empty sarg-reports folder before trying to run sarg again.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • marcelloc
                    marcelloc last edited by

                    @Cino:

                    nothing is shown… I click on the button, it changes to running but nothing is displayed

                    Can you try to run this realtime page using firefox with firebug(network tab) enabled to see if there is any error on it.

                    I'm using current code on a test machine and it's showing realtime log without issues.


                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • gwhynott
                      gwhynott last edited by

                      Hi Marcello,

                      Just wanted to report the latest update is working as expected on our system.  Thanks again for your efforts.

                      I'll be watching for the email reports option.  8)

                      take care and have a great day,
                      greg

                      1 Reply Last reply Reply Quote 0
                      • C
                        Cino last edited by

                        everything looks good, no errors and the page refreshes based on update frequency…. I'll keep testing..... Its probably just my box, begging for a fresh install of pfsense....lol

                        1 Reply Last reply Reply Quote 0
                        • periko
                          periko last edited by

                          Hi.

                          Does someone have test on nanobsd?

                          Thanks!!!

                          Necesitan Soporte de Pfsense en México?/Need Pfsense Support in Mexico?
                          www.bajaopensolutions.com
                          https://www.facebook.com/BajaOpenSolutions
                          Quieres aprender PfSense, visita mi canal de youtube:
                          https://www.youtube.com/c/PedroMorenoBOS

                          1 Reply Last reply Reply Quote 0
                          • marcelloc
                            marcelloc last edited by

                            @periko:

                            Does someone have test on nanobsd?

                            Not yet.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • periko
                              periko last edited by

                              Went the nanobsd arrive I will help testing, thanks  :)

                              Necesitan Soporte de Pfsense en México?/Need Pfsense Support in Mexico?
                              www.bajaopensolutions.com
                              https://www.facebook.com/BajaOpenSolutions
                              Quieres aprender PfSense, visita mi canal de youtube:
                              https://www.youtube.com/c/PedroMorenoBOS

                              1 Reply Last reply Reply Quote 0
                              • marcelloc
                                marcelloc last edited by

                                @periko:

                                Went the nanobsd arrive I will help testing, thanks  :)

                                squid 2.x does not log on nanobsd installs.

                                Are you running dansguardian?

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • periko
                                  periko last edited by

                                  I enable logs in nanobsd and have been using sarg for a while with success, thanks!!!

                                  Necesitan Soporte de Pfsense en México?/Need Pfsense Support in Mexico?
                                  www.bajaopensolutions.com
                                  https://www.facebook.com/BajaOpenSolutions
                                  Quieres aprender PfSense, visita mi canal de youtube:
                                  https://www.youtube.com/c/PedroMorenoBOS

                                  1 Reply Last reply Reply Quote 0
                                  • marcelloc
                                    marcelloc last edited by

                                    great!  :)

                                    I'll commit squidguard functions to sarg until friday.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • gwhynott
                                      gwhynott last edited by

                                      Hi Marcello,

                                      will you (or is there) include a method to sort the reports?  For example,  when viewing "top sites",  it sorts the list by amount of 'hits' by default,  I'd like to sort by amount of data transferred if possible.

                                      with the proliferation of web apps,  hits don't really mean as much as they once did in these types of reports.  as an example I've seen one user generate over 20k hits on teamviewer.com in one day.

                                      thanks again,
                                      greg

                                      1 Reply Last reply Reply Quote 0
                                      • C
                                        Cino last edited by

                                        @gwhynott:

                                        Hi Marcello,

                                        will you (or is there) include a method to sort the reports?   For example,  when viewing "top sites",  it sorts the list by amount of 'hits' by default,   I'd like to sort by amount of data transferred if possible.

                                        with the proliferation of web apps,  hits don't really mean as much as they once did in these types of reports.  as an example I've seen one user generate over 20k hits on teamviewer.com in one day.

                                        thanks again,
                                        greg

                                        @marcelloc there is a way to sort that is built in, kinda… check the default conf file for 'TAG: sorttable path'. Javascript sorttable.js would need to be added, from http://www.kryogenix.org/code/browser/sorttable/.

                                        1 Reply Last reply Reply Quote 0
                                        • marcelloc
                                          marcelloc last edited by

                                          Thanks cino.

                                          I'm merging a contribution for squidguard reports from ccesario and then I'll take a look on it.

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • B
                                            bitskiller last edited by

                                            report on firefox no work!!!  ??? fine on google chrome  ;D

                                            1 Reply Last reply Reply Quote 0
                                            • marcelloc
                                              marcelloc last edited by

                                              @bitskiller:

                                              report on firefox no work!!!  ??? fine on google chrome  ;D

                                              What version of firefox? I'm using it on firefox11 and chrome without issues.

                                              Treinamentos de Elite: http://sys-squad.com

                                              Help a community developer! ;D

                                              1 Reply Last reply Reply Quote 0
                                              • marcelloc
                                                marcelloc last edited by

                                                @Cino:

                                                @marcelloc there is a way to sort that is built in, kinda… check the default conf file for 'TAG: sorttable path'. Javascript sorttable.js would need to be added, from http://www.kryogenix.org/code/browser/sorttable/.

                                                I'll try to include this javascript to enable sort change on reports but did you saw user sort field on sarg settings?

                                                Treinamentos de Elite: http://sys-squad.com

                                                Help a community developer! ;D

                                                1 Reply Last reply Reply Quote 0
                                                • Exolon
                                                  Exolon last edited by

                                                  I've managed to get Sarg Realtime working but when I try and "View Reports", I get a blank page:




                                                  1 Reply Last reply Reply Quote 0
                                                  • marcelloc
                                                    marcelloc last edited by

                                                    Try to generate another report after selecting indextree on sarg settings.

                                                    Treinamentos de Elite: http://sys-squad.com

                                                    Help a community developer! ;D

                                                    1 Reply Last reply Reply Quote 0
                                                    • marcelloc
                                                      marcelloc last edited by

                                                      sarg 0.3 is out with date report format ,sortable reports and squidguard.  :)

                                                      Thanks to cino and ccesario.

                                                      Treinamentos de Elite: http://sys-squad.com

                                                      Help a community developer! ;D

                                                      1 Reply Last reply Reply Quote 0
                                                      • B
                                                        bitskiller last edited by

                                                        @marcelloc:

                                                        @bitskiller:

                                                        report on firefox no work!!!  ??? fine on google chrome  ;D

                                                        What version of firefox? I'm using it on firefox11 and chrome without issues.

                                                        I'm using firefox 11 and does not display my report, if it works well with chrome

                                                        1 Reply Last reply Reply Quote 0
                                                        • marcelloc
                                                          marcelloc last edited by

                                                          bitskiller,

                                                          did you tried to refresh the report frame using right-click -> this frame -> reload?

                                                          Treinamentos de Elite: http://sys-squad.com

                                                          Help a community developer! ;D

                                                          1 Reply Last reply Reply Quote 0
                                                          • Exolon
                                                            Exolon last edited by

                                                            @marcelloc:

                                                            Try to generate another report after selecting indextree on sarg settings.

                                                            Thanks, that did it, I now have reports showing.

                                                            1 Reply Last reply Reply Quote 0
                                                            • D
                                                              Donny last edited by

                                                              I really interesting SARG but until now I could not find any e-mail option to use it for system log report.

                                                              Thank u

                                                              1 Reply Last reply Reply Quote 0
                                                              • marcelloc
                                                                marcelloc last edited by

                                                                It's not implemented yet.

                                                                Mail option will need a mailer daemon running on pfsense like postfix forwarder.

                                                                Treinamentos de Elite: http://sys-squad.com

                                                                Help a community developer! ;D

                                                                1 Reply Last reply Reply Quote 0
                                                                • D
                                                                  Donny last edited by

                                                                  @marcelloc:

                                                                  It's not implemented yet.

                                                                  Mail option will need a mailer daemon running on pfsense like postfix forwarder.

                                                                  I have tested SARG many time with Squid-reverse. This is my step
                                                                  1. I have installed Squid-reverse.
                                                                  2. I have installed SARG and after that I got some error: Sarg config error:log file () does not exits. I want to know what is wrong?.
                                                                  3. I tried to change the "userid" or the "ip address" to be a real user name on the reports like this: "172.31.21.22 Donny Van Cooper" but in the "View report and realtime"tab it does not show a real user name. Where can I resolve any ip address on pfSense or I have to resolve any ip address on Domain Controller (Windows Server 2008)
                                                                  4. I use Firefox web browser also Google Chrome for config SARG and at the "view report" tab dat you said to do is "This frame > reload frame" but some time it does not work I have to do again and again or I have to wait a few second and then report appear.
                                                                  5. Do I have only to select interface "LAN" or I have to select both "LAN and loopback on Squid-reverse.

                                                                  Thank u very much






                                                                  1 Reply Last reply Reply Quote 0
                                                                  • marcelloc
                                                                    marcelloc last edited by

                                                                    @Donny:

                                                                    2. I have installed SARG and after that I got some error: Sarg config error:log file () does not exits. I want to know what is wrong?.

                                                                    This maybe a first install bug, I'll check it.

                                                                    @Donny:

                                                                    3. I tries to change the "userid" or the "ip address" to be a real user name on the reports like this: "172.31.21.22 Donny Van Cooper" but in the "View report and realtime"tab it does not show a real user name. Where can I resolve any ip address on pfSense or I have to resolve any ip address on Domain Controller (Windows Server 2008)
                                                                    4. I use Firefox web browser also Google Chrome for config SARG and at the "view report" tab dat you said to do is "This frame > reload frame" but some time it does not work I have to do again and again or I have to wait a few second and then report appear.

                                                                    did you created any schedule on sarg to create reports?

                                                                    @Donny:

                                                                    5. Do I have only to select interface "LAN" or I have to select both "LAN and loopback on Squid-reverse.

                                                                    Just lan for normal use.

                                                                    Treinamentos de Elite: http://sys-squad.com

                                                                    Help a community developer! ;D

                                                                    1 Reply Last reply Reply Quote 0
                                                                    • D
                                                                      Donny last edited by

                                                                      @marcelloc:

                                                                      @Donny:

                                                                      2. I have installed SARG and after that I got some error: Sarg config error:log file () does not exits. I want to know what is wrong?.

                                                                      This maybe a first install bug, I'll check it.

                                                                      @Donny:

                                                                      3. I tries to change the "userid" or the "ip address" to be a real user name on the reports like this: "172.31.21.22 Donny Van Cooper" but in the "View report and realtime"tab it does not show a real user name. Where can I resolve any ip address on pfSense or I have to resolve any ip address on Domain Controller (Windows Server 2008)
                                                                      4. I use Firefox web browser also Google Chrome for config SARG and at the "view report" tab dat you said to do is "This frame > reload frame" but some time it does not work I have to do again and again or I have to wait a few second and then report appear.

                                                                      did you created any schedule on sarg to create reports?

                                                                      @Donny:

                                                                      5. Do I have only to select interface "LAN" or I have to select both "LAN and loopback on Squid-reverse.

                                                                      Just lan for normal use.

                                                                      Yes, Marcelloc. I have created schedule on sarg to create reports. you can see my screenshot pictures that I post its here but a real user name is still not work.
                                                                      Thank a lot for your help




                                                                      1 Reply Last reply Reply Quote 0
                                                                      • marcelloc
                                                                        marcelloc last edited by

                                                                        check create index tree by file too onsarg config and force a report update.

                                                                        Treinamentos de Elite: http://sys-squad.com

                                                                        Help a community developer! ;D

                                                                        1 Reply Last reply Reply Quote 0
                                                                        • D
                                                                          Donny last edited by

                                                                          @marcelloc:

                                                                          check create index tree by file too on sarg config and force a report update.

                                                                          Hello Marcelloc, I have done what you say but a real user name still not work. as the screenshot below.

                                                                          Thank u very much. I am tired, I go to bed now.


                                                                          1 Reply Last reply Reply Quote 0
                                                                          • marcelloc
                                                                            marcelloc last edited by

                                                                            Donny,

                                                                            Thanks for your feedback.

                                                                            I found an error on field check that was preventing user file to be created.

                                                                            I'm fixing it and including some other options before publishing.

                                                                            Treinamentos de Elite: http://sys-squad.com

                                                                            Help a community developer! ;D

                                                                            1 Reply Last reply Reply Quote 0
                                                                            • marcelloc
                                                                              marcelloc last edited by

                                                                              Version 0.4 is out with

                                                                              • usertab fix

                                                                              • charset option field

                                                                              • few more report config options

                                                                              As users has its own tab, you may need to backup your sarg user configuration before update(just in case  ;))

                                                                              Treinamentos de Elite: http://sys-squad.com

                                                                              Help a community developer! ;D

                                                                              1 Reply Last reply Reply Quote 0
                                                                              • D
                                                                                Donny last edited by

                                                                                @marcelloc:

                                                                                Version 0.4 is out with

                                                                                • usertab fix

                                                                                • charset option field

                                                                                • few more report config options

                                                                                As users has its own tab, you may need to backup your sarg user configuration before update(just in case  ;))

                                                                                Hello Marcelloc, today is a wonderful world, I have tested SARG with a real user name for a new SARG v.04. Now it is working.  see some screenshot. I will waiting for the next e-mail option to use for system log sending. The next step I will testing with Windows Server 2008 R2 Active Directory ( LDAP ). You are really really working hard. If I find something error more I will posting here as soon as possible.

                                                                                Thank u so much to help me a lot




                                                                                1 Reply Last reply Reply Quote 0
                                                                                • E
                                                                                  elemay last edited by

                                                                                  Hi,

                                                                                  i updated today and now have:

                                                                                  sarg [Sarg] config error: dansguardian logfile () does not exist

                                                                                  1 Reply Last reply Reply Quote 0
                                                                                  • marcelloc
                                                                                    marcelloc last edited by

                                                                                    @elemay:

                                                                                    Hi,

                                                                                    i updated today and now have:

                                                                                    sarg [Sarg] config error: dansguardian logfile () does not exist

                                                                                    It happens just after reinstall or on every Sargent configuration save?

                                                                                    Treinamentos de Elite: http://sys-squad.com

                                                                                    Help a community developer! ;D

                                                                                    1 Reply Last reply Reply Quote 0
                                                                                    • First post
                                                                                      Last post