Configuring SARG on OpenBSD

blood_omen · 07-04-2007, 01:18 PM

Greetings,

I'm facing the following challenge, I'm trying to make a proxy server with sarg to cache and monitor the internet traffic on my company.

I'm currently using:
OpenBSD 4.1
squid-2.6.STABLE9-transparent-snmp
sarg-2.1p0
Apache 1.3.x in chroot (default for OBSD)

All standard, precompiled packages provided on the OpenBSD repository.

I have apache working serving web pages, I also installed and configured squid and at this very moment it is working and caching all web traffic, now I need to see what is it that is caching.

Does anybody knows of a good howto configure sarg on OBSD so to point me on the right directions?

Any help will be appreciated, thanks in advance.

P.S: If not sarg, it could be any other monitoring tool.

blood_omen · 07-04-2007, 03:18 PM

Ok, I got sarg installed and configured; however, I'm facing the following error whenever I try to start sarg, it gives me this error:

Code:

# sarg
SARG: File not found: /var/squid/logs/access.log

Here's the part of my sarg.conf file stating the path to the access.log file

Code:

# TAG:  access_log file
#       Where is the access.log file
#       sarg -l file
#
access_log /var/squid/logs/access.log

Here's the output of the /var/squid/logs directory

Code:

# ls -l /var/squid/logs/                                                                                               
total 2956
-rw-r-----  1 _squid  _squid  617425 Jul  3 16:17 access.log
-rw-r-----  1 _squid  _squid   20025 Jul  3 18:56 cache.log
-rw-r--r--  1 root    _squid       6 Jul  3 18:55 squid.pid
-rw-r-----  1 _squid  _squid  825785 Jul  3 18:56 store.log

Once again, any help is apreciated.

blood_omen · 07-06-2007, 10:58 AM

Hello,

Any help will be appreciated, thanks.

SteveK1979 · 07-10-2007, 06:46 PM

Hi,

Firstly, I've never used SARG, but it sounds like something that might be worth me checking out for my system

Anyway, given that it appears to know where to find the squid access.log, are you sure that it has permissions to read the file? A quick glance indicates that the user sarg runs as would probably need to be in the _squid group.

Cheers,
Steve

blood_omen · 07-18-2007, 01:53 PM

Solved

I still don't know who it happens, any input to clarify why it worked will be appreciated.

Used the sarg command parsing along the way the file to get the input from to somehow force the file load, and to my surprise it worked.

Code:

sarg -f /var/squid/logs/access/log

After that just needed to solved minor details in apache, then I went and commented the line from this

Code:

# TAG:  access_log file
#       Where is the access.log file
#       sarg -l file
#
access_log /var/squid/logs/access.log

to

Code:

# TAG:  access_log file
#       Where is the access.log file
#       sarg -l file
#
#access_log /var/squid/logs/access.log

now I just input

Code:

sarg

and everything is working just fine. Again, due to the fact that I'm new to the proxy thing I must have been missing something before, so anyone who might know about this behaviour and cares to explain me why it behave the way it did is appreciated