Squid Report Generator (SARG) issues

fedix · 05-14-2013, 10:25 AM

I've installed Squid3, Dansguardian, Webmin and SARG on a Ubuntu 13 server.

I got Squid and Dansguardian to work (although I could never get the cache_dir option in Squid to work - if I enable, Squid doesn't start). I've followed the descriptions on other sites to ensure that sarg.conf, dansguardian.conf and squid.conf is all talking to each other. I've changed dansguardian.conf to log in Squid's format and pointed sarg.conf to dansguardian access.log file. BUT, I can't get the SARG reports to run; I get this error message:

Quote:

sarg -l /var/log/dansguardian/access.log
SARG: getword backtrace:
SARG: 1:sarg() [0x4090a7]
SARG: 2:sarg() [0x409894]
SARG: 3:sarg() [0x405f5f]
SARG: 4:/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7fc482e78ea5]
SARG: 5:sarg() [0x40889d]
SARG: Maybe you have a broken date in your /var/log/dansguardian/access.log file
SARG: getword_atoll loop detected after 2 bytes.
SARG: Line="72.16.5.103 http"
SARG: Record="72.16.5.103 http"
SARG: searching for 'x2f

Any help please!

This is my different conf. files.... (I've cut all the comments)
DANSGUARDIAN

Quote:

# DansGuardian config file for version 2.10.1.1

# **NOTE** as of version 2.7.5 most of the list files are now in dansguardianf1.conf

#UNCONFIGURED - Please remove this line after configuration

reportinglevel = 3
languagedir = '/etc/dansguardian/languages'
language = 'ukenglish'
loglevel = 2
logexceptionhits = 2
logfileformat = 3
loglocation = '/var/log/dansguardian/access.log'
statlocation = '/var/log/dansguardian/stats'
filterip =
filterport = 8080
proxyip = 127.0.0.1
proxyport = 3128
accessdeniedaddress = 'http://localhost/cgi-bin/dansguardian.pl'
nonstandarddelimiter = on
usecustombannedimage = on
custombannedimagefile = '/usr/share/dansguardian/transparent1x1.gif'
filtergroups = 1
filtergroupslist = '/etc/dansguardian/lists/filtergroupslist'
bannediplist = '/etc/dansguardian/lists/bannediplist'
exceptioniplist = '/etc/dansguardian/lists/exceptioniplist'
showweightedfound = on
weightedphrasemode = 2
urlcachenumber = 1000
urlcacheage = 900
scancleancache = on
phrasefiltermode = 2
preservecase = 0
hexdecodecontent = off
forcequicksearch = off
reverseaddresslookups = off
reverseclientiplookups = off
logclienthostnames = off
createlistcachefiles = on
maxuploadsize = -1
maxcontentfiltersize = 256
maxcontentramcachescansize = 2000
maxcontentfilecachescansize = 20000
filecachedir = '/tmp'
deletedownloadedtempfiles = on
initialtrickledelay = 20
trickledelay = 10
downloadmanager = '/etc/dansguardian/downloadmanagers/fancy.conf'
#downloadmanager = '/etc/dansguardian/downloadmanagers/trickle.conf'
downloadmanager = '/etc/dansguardian/downloadmanagers/default.conf'
contentscannertimeout = 60
contentscanexceptions = off
recheckreplacedurls = off
forwardedfor = off
usexforwardedfor = off
logconnectionhandlingerrors = on
logchildprocesshandling = off
maxchildren = 120
minchildren = 8
minsparechildren = 4
preforkchildren = 6
maxsparechildren = 32
maxagechildren = 500
maxips = 0
ipcfilename = '/tmp/.dguardianipc'
urlipcfilename = '/tmp/.dguardianurlipc'
ipipcfilename = '/tmp/.dguardianipipc'
pidfilename = '/var/run/dansguardian.pid' # edited
nodaemon = off
nologger = off
logadblocks = off
loguseragent = off
daemonuser = 'dansguardian'
daemongroup = 'dansguardian'
softrestart = off
mailer = '/usr/sbin/sendmail -t'

SQUID3

Quote:

# WELCOME TO SQUID 3.1.19
# ----------------------------
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl localnet src 10.0.0.0/16
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128
# cache_dir ufs /var/log/squid3/cache 500 16 256 # edited
access_log /var/log/squid3/access.log squid
coredump_dir /var/spool/squid3
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern (Release|Packages(.gz)*)$ 0 20% 2880
refresh_pattern . 0 20% 4320
visible_hostname myserver
# redirect_program /var/www/bannerfilter/redirector.pl # edited

SARG

Quote:

# sarg.conf
#
access_log /var/log/dansguardian/access.log
graphs yes
graph_font /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
title "Dansguardian User Access Reports"
font_face Tahoma,Verdana,Arial
header_color darkblue
header_bgcolor blanchedalmond
font_size 9px
background_color white
text_color #000000
text_bgcolor lavender
title_color green
temporary_dir /tmp
output_dir /var/www/sarg
resolve_ip no
user_ip no
topuser_sort_field BYTES reverse
user_sort_field BYTES reverse
exclude_users /etc/sarg/exclude_users
exclude_hosts /etc/sarg/exclude_hosts
date_format e
remove_temp_files yes
index yes
index_tree file
overwrite_report yes
records_without_userid ip
use_comma yes
topsites_num 100
topsites_sort_order CONNECT D
index_sort_order D
exclude_codes /etc/sarg/exclude_codes
max_elapsed 28800000
report_type topsites sites_users users_sites date_time denied auth_failures site_user_time_date
usertab /etc/sarg/usertab
long_url no
date_time_by bytes
charset Latin1
show_successful_message no
show_read_statistics no
topuser_fields NUM DATE_TIME USERID CONNECT BYTES %BYTES IN-CACHE-OUT USED_TIME MILISEC %TIME TOTAL AVERAGE
user_report_fields CONNECT BYTES %BYTES IN-CACHE-OUT USED_TIME MILISEC %TIME TOTAL AVERAGE
dansguardian_conf /etc/dansguardian/dansguardian.conf
#squidguard_conf /etc/squid3/squid.conf
www_document_root /var/www
download_suffix "zip,arj,bzip,gz,ace,doc,iso,adt,bin,cab,com,dot,drv$,lha,lzh,mdb,mso,ppt,rtf,src,shs,sys,exe,dll,mp 3,avi,mpg,mpeg"

siremaxus · 05-14-2013, 04:35 PM

Quote:

Originally Posted by fedix

(although I could never get the cache_dir option in Squid to work - if I enable, Squid doesn't start)

Hello,

What does it says in the squid.out file?

Good Luck

Sire Maxus

fedix · 05-15-2013, 01:04 PM

I managed to get cache_dir working - it looks like it was file and directory ownership... :-)

But my SARG report still gives an error.....

fedix · 05-15-2013, 01:17 PM

I managed to get cache_dir working - it looks like it was file and directory ownership... :-)

But my SARG report still gives an error.....