Author Topic: Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator  (Read 19594 times)

clicerioneto

  • Zen Monk
  • **
  • Posts: 89
  • Karma: +0/-0
    • View Profile
Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator
« on: September 04, 2009, 02:41:57 pm »
   
Hi,


As the reports from the logs of the proxy does not have options such as: top sites, top user, list of blocked sites and also be very slow ... I'm trying to view logs using the tool SARG - http://sarg.sourceforge.net/sarg.php --

To Install

Code: [Select]
apt-get update
Code: [Select]
apt-get install sarg
In settings sarg.conf
Code: [Select]
/etc/squid/sarg.conf
the line below, I specify the path where the logs (squid or dansguardian ???)

# TAG: access_log file
# Where is the access.log file
# Sarg-l file
#
access_log /var/log/dansguardian/access.log
or
access_log /var/log/squid/access.log

Even in settings has sarg.conf option below:


# TAG: dansguardian_conf file
# DansGuardian.conf file path
# Generate reports from DansGuardian logs.
# Use 'none' to disable it.
# Dansguardian_conf /usr/dansguardian/dansguardian.conf
#
# dansguardian_conf none

I do not know if it is needed  ???


#################

After running the command:

Code: [Select]
cd /var/log/dansguardian
Code: [Select]
#sarg -l access.log -l access.log.1 -l access.log.2 -l access.log.3 -l access.log.4 -l access.log.5
Go to Http:// ip /squid-reports






« Last Edit: September 04, 2009, 05:10:55 pm by clicerioneto »

Pfff

  • Zen Warrior
  • ***
  • Posts: 132
  • Karma: +0/-0
  • Be open
    • View Profile
    • Webynux
Re: Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator
« Reply #1 on: September 15, 2009, 08:54:31 pm »
Hello,

I try to install SARG, but it still no work...
http://IP/squid-reports/

When i make a
Code: [Select]
#sarg -l access.log
and with a sudo .... no answer....

Any idea, is it working on your side??
How often the squid-reports is updated?

Many thx
« Last Edit: September 16, 2009, 07:29:17 am by Pfff »

thomas

  • Zen Monk
  • **
  • Posts: 67
  • Karma: +1/-0
    • View Profile
Re: Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator
« Reply #2 on: September 19, 2009, 04:10:16 pm »
Just install.
Then execute only the sarg command without any parameters.
Last, point your browser to http://ip/squid-reports (not https)

Don't forget to open the http port (80), or do whatever else is needed on your firewall

Pfff

  • Zen Warrior
  • ***
  • Posts: 132
  • Karma: +0/-0
  • Be open
    • View Profile
    • Webynux
Re: Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator
« Reply #3 on: September 19, 2009, 09:38:35 pm »
Hello

thx, it worked.... untill our serveur crashed....
i will reinstall on a new server next week. I let you know.

thomas

  • Zen Monk
  • **
  • Posts: 67
  • Karma: +1/-0
    • View Profile
Re: Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator
« Reply #4 on: September 22, 2009, 12:08:02 am »
I also tried http://lightsquid.sourceforge.net/
I think it's better
The installation is just a little harder

thomas

  • Zen Monk
  • **
  • Posts: 67
  • Karma: +1/-0
    • View Profile
Re: Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator
« Reply #5 on: October 22, 2009, 02:45:45 pm »
I think, the best one is mysar
http://giannis.stoilis.gr/software/mysar/

It uses mysql as backend, it's more resources 'hungry', but you have everything in a RDBMS, and you can built your own applications to access all the logged information.

I have installed all the above, and the best is mysar. I also think, that it would be easy for the developers to include mysar in a future ebox release.

shawnbishop

  • Zen Apprentice
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
Re: Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator
« Reply #6 on: September 30, 2011, 09:43:19 am »
Good Day

Some updates, the sarg.conf files lives at

#/etc/sarg/sarg.cong

When I run the sarg -l access.log command, I get the following


root@emp-srv01:~# vi /etc/sarg/sarg.conf
root@emp-srv01:~# sarg -l access.log
SARG: Unknown option site_user_time_date_type table
SARG: File not found: access.log

I have hashed out the entry in the sarg.conf file, then it worked..?? But there isnt much info in the access.log files, is this because it is a transparent proxy?

therobust

  • Zen Apprentice
  • *
  • Posts: 41
  • Karma: +0/-0
    • View Profile
Re: Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator
« Reply #7 on: June 24, 2012, 04:03:22 pm »
Hi Geeks,

I thought of looking into http logs and what i saw is the URLs of http requests only in the logs... however the logs dont show the https URLs as such...
any help how could i monitor https requests?

Regards.