SARG says that URL could not be retrieved because "Connection was Refused"
 

Hello,
I have a network of approx 100 pcs (with Microsoft Windows XP Pro and Server 2003).

I just setup a machine to be a network proxy. This machine is using CentOS 5, Squid, and SARG. It seems to be working perfectly. Network traffic is being logged.

The problem that I am having is that when I am sitting at my windows pc and go to the Internet Explorer browser to pull up the SARG reports, that are all in HTML,...there is an error being produced. This is the error:

ERROR
The requested URL could not be retrieved

---------------------------------------------------------------

While trying to retrieve the URL: http:// prox.lwp.net/sarg

The following error was encountered:

Connection to 127.0.0.1 Failed
The system returned:

(111) Connection refusedThe remote host or network may be down. Please try the request again.

Your cache administrator is root.

------------------------------------------------------------

Generated Mon, 29 Sep 2008 16:26:44 GMT by prox.lwp.net (squid/2.6.STABLE6)

I can use PuTTY to log into my proxy and I can use the eLinks or something like a DOS based Squid User Access Report. I need to be able to get these reports in HTML though.

Can someone please tell me why I am getting this error??? And what to do to get it to generate and show the HTML reports???

Thanks

Bobby

Well, the reports may be in HTML format, but does your Centos machine have Apache running on it, to serve up those pages? Are those pages in a directory that is readable by Apache? Does DNS return the right address for that name you entered in the browser?

I'm not sure...I am new to Linux, but I will check on it....
Thanks for your help!

You're welcome, but we haven't helped yet. ;)

If you've got the reports in HTML format as you've said, you're most of the way there. You should just then have to make sure apache is running on that box (LOTS of how-tos on how to do that), and make sure the directory(ies) your reports are in, can be accessed by Apache.

Ok....well...I think apache was installed, it just wasn't configured. After I configured apache and started the apache services. I went to the browser and typed in my servers ip address/sarg and it worked...perfectly.

I take my hat off and say thank you to you for your help!!!

Now I have another question:

Once I am in the User Report section, I see multiple entries like this:

ACCESSED SITE CONNECT BYTES %BYTES IN-CACHE-OUT ELAPSED TIME MILISEC %TIME
dmcom.espn.go.com 6 16.24M 9.09% 0.00% 100.00% 00:02:09 129.855 0.85%

what do each of these field tell me (I don't understand what their purpose is or how useful the information is):
CONNECT
BYTES
%BYTES
IN-CACHE-OUT
ELAPSED TIME
MILISEC
%TIME


and when I click the Date and Time Report I see this:
ACCESSED SITE DATE TIME
dmcom.espn.go.com 09/29/2008 12:10:11
dmcom.espn.go.com 09/29/2008 12:10:12
dmcom.espn.go.com 09/29/2008 12:10:18
dmcom.espn.go.com 10/01/2008 07:00:06
dmcom.espn.go.com 10/01/2008 07:00:12
dmcom.espn.go.com 10/01/2008 07:00:13

This initially appears to be self explanatory, but what about the time. Is the time in AM or PM??? Did this user visit this site multiple times on different dates???

Again thanks for the help!!!

Bobby