OPNsense Forum

Archive => 18.7 Legacy Series => Topic started by: nospam on September 13, 2018, 06:29:29 pm

Title: Looking for someone with working lightsquid and sarg running on their system
Post by: nospam on September 13, 2018, 06:29:29 pm

I'm trying to get lightsquid and sarg running on my system but am running into problems with the scripts expected date formats vs what my system is generating

my squid access.log generates lines in the format
XXX.XXX.XXX.XXX - XX:XX:XX:XX:XX:XX - [13/Sep/2018:00:00:20 -0400] "POST http://somewebsite HTTP/1.1" 403 4171 "-" "Mozilla/5.0 (Linux; )" TCP_DENIED:HIER_NONE

but when I run lightparser.pl I don't get any output and sarg -x gives me script date input errors like

SARG: Loop detected in getword_atoll after 0 bytes.
SARG: Line=" [13/Sep/2018"
SARG: Record=" [13/Sep/2018"
SARG: searching for 'x2f'
SARG: Invalid date in file "/var/log/squid/access.log"

Can somebody post a couple of lines from their access log so I can compare what's going on?

Title: Re: Looking for someone with working lightsquid and sarg running on their system
Post by: nospam on September 13, 2018, 06:59:31 pm

If your system is working can you post your line in /usr/local/etc/squid/squid.conf for "logformat opnsense"

Mine is defaulted to:
logformat opnsense      %>a %[ui %>eui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh