Dglog2 for dansguardian log analysis



  • Just thought I'd share in case anyone is interested… I had been installing webmin and the dansguardian webmin module to get a decent dansguardian reporting tool. I just figured out that it was fairly easy to get dglog2 working.

    Steps are:
    1.) Install lightsquid. Probably not necessary, but the install turns on Perl CGI support in the web server.
    2.) Copy dglog2.pl into a directory under /usr/local/www (such as /usr/local/www/dglog2)
    3.) Create an index.cgi file in the directory above.
    4.) Add "index.cgi" to the server.indexfiles entry in /etc/inc/system.inc

    Might need to do a reboot, but that's basically it. dglog2 is now accesible as http://yourhost.com/your_directory/

    I've attached the dglog2.pl file and an index.cgi file if anyone wants it - just need to remove the .txt extension

    dglog2.pl.txt
    index.cgi.txt



  • First off, thanks so much for posting this solution! Was exactly what I was looking for  :)

    Secondly, for anyone else who might be bumping into the same problem, I wound up having to change the permissions on both files to set them as executable. Prior to that I was getting a "500 Internal Server Error" and lighttpd would core dump. Ran:

    chmod 755 * 
    

    in the dglog2 directory and all is well now.



  • @wyzeguy:

    First off, thanks so much for posting this solution! Was exactly what I was looking for  :)

    You're welcome. Sorry about the chmod… BTW... if you want to add it to your pfSense menu, you can copy the attached php file to /usr/local/www and add a line like this...

    $status_menu[] = array(gettext("Content Filter Logs"), "/content_filter_logs.php");
    

    into fbegin.inc somewhere around line 199 (where it is building the "status menu" array).

    content_filter_logs.php.txt



  • Thank you again! That was going to be my next project!



  • I was attempting to try this out, however I can only get a blank browser when I go to it.  Now I did not install light squid as I already have a version of squid installed.  I was trying to just get it working through the default https instance of the GUI.  Is that possible?  I copied the files to /usr/local/www/dglog2 and did the chmod command.  I also made the edits to get the menu to show up in the status section.

    I did notice in the pl script is talks about installing a cgi component and a compression component.  Is this what I am missing?  I was hoping to not have to figure out how to do make, etc.  Is is possible to just use pkg_add or pbi_add to add the needed packages?  I tried cgi-lib, cgi-lib_pl, and gzip but that didn't seem to make a difference.



  • Lightsquid is not "squid" - it is a squid reporting package. It installs the perl CGI stuff correctly. I'm sure you can make perl CGI work without installing it, but I don't know the steps.



  • Oh, I didn't realize that.  That makes it easy.  It seems to be working now.

    Playing around with light squid as well.  It is strange but on one of my two boxes I get errors on the lightsquid.  On the report I get:

    LigthSquid diagnostic.
    Error : report folder '/var/lightsquid/report' not contain any valid data! Please run lightparser.pl (and check 'report' folder content)
    Please check config file !

    I've already followed the directions and there is content in the /var/lightsquid/report directory but I still get this error.  Also I get this on the realtime tab:

    Warning: gethostbyaddr(): Address is not a valid IPv4 or IPv6 address in /usr/local/www/sqstat/sqstat.class.php on line 426 Warning: gethostbyaddr(): Address is not a valid IPv4 or IPv6 address in /usr/local/www/sqstat/sqstat.class.php on line 426 Warning: gethostbyaddr(): Address is not a valid IPv4 or IPv6 address in /usr/local/www/sqstat/sqstat.class.php on line 426 Warning:

    That message repeats quite a bit.  I don't suppose you've seen this before?



  • Really haven't messed with lightsquid much… sorry.


Log in to reply