pfSense Gold Subscription

Author Topic: Sarg package for pfsense  (Read 82762 times)

0 Members and 1 Guest are viewing this topic.

Offline Donny

  • Jr. Member
  • **
  • Posts: 73
  • Karma: +0/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #75 on: April 10, 2012, 02:09:51 am »
Version 0.4 is out with

  • usertab fix
  • charset option field
  • few more report config options

As users has its own tab, you may need to backup your sarg user configuration before update(just in case  ;))

Hello Marcelloc, today is a wonderful world, I have tested SARG with a real user name for a new SARG v.04. Now it is working.  see some screenshot. I will waiting for the next e-mail option to use for system log sending. The next step I will testing with Windows Server 2008 R2 Active Directory ( LDAP ). You are really really working hard. If I find something error more I will posting here as soon as possible.

Thank u so much to help me a lot

« Last Edit: April 10, 2012, 02:11:54 am by Donny »

Offline elemay

  • Jr. Member
  • **
  • Posts: 32
  • Karma: +0/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #76 on: April 10, 2012, 03:18:34 am »
Hi,

i updated today and now have:

sarg [Sarg] config error: dansguardian logfile () does not exist

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #77 on: April 10, 2012, 07:49:07 am »
Hi,

i updated today and now have:

sarg [Sarg] config error: dansguardian logfile () does not exist

It happens just after reinstall or on every Sargent configuration save?

Offline elemay

  • Jr. Member
  • **
  • Posts: 32
  • Karma: +0/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #78 on: April 10, 2012, 08:13:57 am »
reinstalling only.

[SOLVED] i also experience if i set up a schedule, and do a 'Force Update Now' i get no report, telling me:

Code: [Select]
Error: Could not find report index file.
Check sarg settings and try to force sarg schedule.

in system logs i see:

Code: [Select]
Apr 10 15:55:45 php: /pkg_edit.php: The command '/usr/local/bin/sarg ' returned exit code '1', the output was 'SARG: Records in file: 174067, reading: 0.00%^MSARG: Maybe you have a broken date in your /var/log/dansguardian/access.log file SARG: getword_atoll loop detected after 2 bytes. SARG: Line="xx.xx.xx.xx http" SARG: Record="xx.xx.xx.xx http" SARG: searching for 'x2f''
i deleted access.log and restarted dansguradian, everythings fine again. :)
« Last Edit: April 10, 2012, 09:43:32 am by elemay »

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #79 on: April 10, 2012, 10:00:10 am »
sarg reads dansguardian logs only in squid format.

A log rotate(or remove like you did :)) should fix it after changing format.
« Last Edit: April 10, 2012, 10:02:47 am by marcelloc »

Offline Donny

  • Jr. Member
  • **
  • Posts: 73
  • Karma: +0/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #80 on: April 10, 2012, 02:09:14 pm »
Hi,
I just wonder, how can I map users name with dynamic IP address if my pfSense act as DHCP Server? Is it possible? In this case I do not use Windows Server.
example: I have 75 users desktop Windows XP or Windows 7 and get dynamic ip address from pfSense DHCP server or I have to map a real user name with ip address one by one at the option "Users association" like this:
172.31.21.22 Don Van Cooper
172.31.21.23 Teun Van Laarhoven
172.31.21.24 Marijon Kooijstra > until 75 users.

pfSense:  
1. pfSense is DNS Server
2. pfSense is DNS Forwarder
3. pfSense is DHCP Server

at option "Ntlm User Format" When I have changed from "domainname+username(default)" to "Username" and Realtime report is not working. what is differences between "domainname+username" and "Username" to use?



« Last Edit: April 10, 2012, 02:11:41 pm by Donny »

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #81 on: April 10, 2012, 02:12:41 pm »
Hi,
I just wonder, how can I map users name with dynamic IP address if my pfSense act as DHCP Server? Is it possible? In this case I do not use Windows Server.
example: I have 75 users desktop Windows XP or Windows 7 and get dynamic ip address from pfSense DHCP server or I have to map a real user name with ip address one by one at the option "Use association" like this:
172.31.21.22 Don Van Cooper
172.31.21.23 Teun Van Laarhoven
172.31.21.24 Marijon Kooijstra > until 75 users.
Try to enable squid basic authentication with local users.

at option "Ntlm User Format" When I have changed from "domainname+username(default)" to "Username" and Realtime report is not working. what is differences between "domainname+username" and "Username" to use?

This option is usefull only when you have ntlm authentication using samba and active directory.


Offline Donny

  • Jr. Member
  • **
  • Posts: 73
  • Karma: +0/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #82 on: April 10, 2012, 02:23:29 pm »
Hi,
I just wonder, how can I map users name with dynamic IP address if my pfSense act as DHCP Server? Is it possible? In this case I do not use Windows Server.
example: I have 75 users desktop Windows XP or Windows 7 and get dynamic ip address from pfSense DHCP server or I have to map a real user name with ip address one by one at the option "Use association" like this:
172.31.21.22 Don Van Cooper
172.31.21.23 Teun Van Laarhoven
172.31.21.24 Marijon Kooijstra > until 75 users.
Try to enable squid basic authentication with local users.

at option "Ntlm User Format" When I have changed from "domainname+username(default)" to "Username" and Realtime report is not working. what is differences between "domainname+username" and "Username" to use?

This option is usefull only when you have ntlm authentication using samba and active directory.



Thank u Marcelloc, One more question. When I have changed from "domainname+username(default)" to "Username" and why a realtime report is not working?

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #83 on: April 10, 2012, 02:32:03 pm »

Thank u Marcelloc, One more question. When I have changed from "domainname+username(default)" to "Username" and why a realtime report is not working?

this is a config bug in sarg

config file says:
# TAG: ntlm_user_format username|domainname+username
#      NTLM users format.
#
#ntlm_user_format domainname+username
ntlm_user_format username


but sarg returns with:
SARG: Unknown value "username" for parameter "ntlm_user_format"

if I change this option to 'user' it works.

I'm publishing a patch right now, whait 15 minutes and reinstall sarg
« Last Edit: April 10, 2012, 02:33:56 pm by marcelloc »

Offline Donny

  • Jr. Member
  • **
  • Posts: 73
  • Karma: +0/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #84 on: April 10, 2012, 04:17:53 pm »

Thank u Marcelloc, One more question. When I have changed from "domainname+username(default)" to "Username" and why a realtime report is not working?

this is a config bug in sarg

config file says:
# TAG: ntlm_user_format username|domainname+username
#      NTLM users format.
#
#ntlm_user_format domainname+username
ntlm_user_format username


but sarg returns with:
SARG: Unknown value "username" for parameter "ntlm_user_format"

if I change this option to 'user' it works.

I'm publishing a patch right now, whait 15 minutes and reinstall sarg


Now I do a basic to authenticate and create local user on Squid-reverse. At authentication settings, they say that I have to turn off "Transparent proxy" and I have done it.
at shedule tab I try to "force Update now" but at realtime report tab when I click "Show log", it does not show any report. It does not work when I use local user and authetication:local.

« Last Edit: April 10, 2012, 04:23:15 pm by Donny »

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #85 on: April 10, 2012, 04:39:10 pm »
After disabling transparente proxy, you are able to filter ssl but you need first to configure proxy settings on client browsers.

Offline Donny

  • Jr. Member
  • **
  • Posts: 73
  • Karma: +0/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #86 on: April 10, 2012, 06:14:31 pm »
After disabling transparente proxy, you are able to filter ssl but you need first to configure proxy settings on client browsers.

at the web browsers client I have configured proxy setting and I tried to log in with local user name and password that I created from Squid proxy. after log in success I try to check at realtime report on SARG but the report only show ip address and it is not show user name that I used log in.

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #87 on: April 10, 2012, 06:34:02 pm »
Are you using just squid?

Can you check in log files if you can see the auth user?

Offline klamath

  • Jr. Member
  • **
  • Posts: 28
  • Karma: +0/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #88 on: April 10, 2012, 09:04:57 pm »
Thanks Marcelo...

I've got some problem to get it done...
It doesn't work for me...
Can you help me?

 [Sarg]Sarg config error: log file () does not exists     .:.   

Quote
Apr 10 23:00:29   php: /pkg_edit.php: executing squid log rotate after sarg.
Apr 10 23:00:29   php: /pkg_edit.php: executing squidguard log rotate after sarg.
Apr 10 23:00:29   php: /pkg_edit.php: The command '/usr/local/bin/sarg ' returned exit code '1', the output was 'SARG: Records in file: 49003, reading: 0.00%^MSARG: Records in file: 5000, reading: 10.20%^MSARG: Records in file: 10000, reading: 20.41%^MSARG: Records in file: 15000, reading: 30.61%^MSARG: Records in file: 20000, reading: 40.81%^MSARG: Records in file: 25000, reading: 51.02%^MSARG: Records in file: 30000, reading: 61.22%^MSARG: Records in file: 35000, reading: 71.42%^MSARG: Records in file: 40000, reading: 81.63%^MSARG: Records in file: 45000, reading: 91.83%^MSARG: Cannot delete /usr/local/www/sarg-reports/08Apr2012-10Apr2012/d192_168_1_106.html - No such file or directory SARG: Records in file: 49003, reading: 100.00%'
Apr 10 23:00:28   php: /pkg_edit.php: Sarg: force refresh now with '' args and rotate action after sarg finish.

Command line
Quote
sarg
SARG: Records in file: 49194, reading: 100.00%
SARG: Cannot delete /usr/local/www/sarg-reports/2012/04/08-10/d192_168_1_106.html - No such file or directory
« Last Edit: April 10, 2012, 09:26:01 pm by klamath »
HP ProLiant MicroServer N40L - 2GB - 250G HD - 3 NIC Intel PRO/1000 MT Gigabit PCI
pfSense 2.0.1-RELEASE (amd64)

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Sarg package for pfsense
« Reply #89 on: April 10, 2012, 09:11:23 pm »
Can you clean this problematic folder and try to run Sarg again?

My current schedules are
1h with no action after sarg
1d with rotate and restart.

Index options are selected on sarg configuration as well report overwrite.
« Last Edit: April 11, 2012, 01:30:15 am by marcelloc »