Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
18.7 Legacy Series
»
Looking for someone with working lightsquid and sarg running on their system
« previous
next »
Print
Pages: [
1
]
Author
Topic: Looking for someone with working lightsquid and sarg running on their system (Read 2966 times)
nospam
Newbie
Posts: 29
Karma: 0
Looking for someone with working lightsquid and sarg running on their system
«
on:
September 13, 2018, 06:29:29 pm »
I'm trying to get lightsquid and sarg running on my system but am running into problems with the scripts expected date formats vs what my system is generating
my squid access.log generates lines in the format
XXX.XXX.XXX.XXX - XX:XX:XX:XX:XX:XX - [13/Sep/2018:00:00:20 -0400] "POST
http://somewebsite
HTTP/1.1" 403 4171 "-" "Mozilla/5.0 (Linux; )" TCP_DENIED:HIER_NONE
but when I run lightparser.pl I don't get any output and sarg -x gives me script date input errors like
SARG: Loop detected in getword_atoll after 0 bytes.
SARG: Line=" [13/Sep/2018"
SARG: Record=" [13/Sep/2018"
SARG: searching for 'x2f'
SARG: Invalid date in file "/var/log/squid/access.log"
Can somebody post a couple of lines from their access log so I can compare what's going on?
Logged
nospam
Newbie
Posts: 29
Karma: 0
Re: Looking for someone with working lightsquid and sarg running on their system
«
Reply #1 on:
September 13, 2018, 06:59:31 pm »
If your system is working can you post your line in /usr/local/etc/squid/squid.conf for "logformat opnsense"
Mine is defaulted to:
logformat opnsense %>a %[ui %>eui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
18.7 Legacy Series
»
Looking for someone with working lightsquid and sarg running on their system