RE: [squid-users] Getting SARG to show usernames instead of IP
Thanks. I'll go the intercept route so I'll pass on the WCCP setup for now. What auth method would you folks suggest. Easiest to setup? Once i get this going with WPAD and PAC, I'll look at a second box for squid as don't want users to not connect to the Internet if the Squid box dies. On Wed, 20 Jul 2011 19:35:41 -0600 Alfonso Alejandro Reyes Jimenez wrote Chinner. This information is not part of the squid configuration but I couldn't let you jump to Cisco wccp without sharing my experience. That feature is not working right with any asa5500 IOS version, it has a lot of bugs. Be very careful if you set it up on production environment. Regards. Alfonso. -Mensaje original- De: chinner999 [mailto:chinner...@gmail.com] Enviado el: miércoles, 20 de julio de 2011 11:39 a.m. Para: squid-users@squid-cache.org Asunto: Re: [squid-users] Getting SARG to show usernames instead of IP Right from the squid.conf file WARNING: authentication can't be used in a transparently intercepting # proxy as the client then thinks it is talking to an origin server and # not the proxy. This is a limitation of bending the TCP/IP protocol to # transparently intercepting port 80, not a limitation in Squid. # Ports flagged 'transparent', 'intercept', or 'tproxy' have # authentication disabled. Guess I can't use authentication with a transparent setup. Will have to investigate intercept proxy. I'm trying to use Cisco WCCP via our Cisco 5505's so if I go intercept proxy and the Squid server goes offline, Internet traffic can still go through. On Wed, 20 Jul 2011 10:21:47 -0600 Chad Naugle wrote Simple answer: SARG (or any log analyzer) requires Squid to post usernames in the access log, by using authentication helpers. I am not certain if this can be done in Transparent or Intercept mode at all. chinner999 7/20/2011 12:11 PM Hi guys, I have SARG running and the reports shows usage per user by ip address. How do I get it to show username instead? The users are using Active Directory. I don't have Squid configured for any authentication currently. Ubuntu v10.04 Sarg v2.2.7.1 Squid v3.1.6 - transparent Thanks. Travel Impressions made the following annotations - This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you.
Re: [squid-users] Getting SARG to show usernames instead of IP
Right from the squid.conf file WARNING: authentication can't be used in a transparently intercepting # proxy as the client then thinks it is talking to an origin server and # not the proxy. This is a limitation of bending the TCP/IP protocol to # transparently intercepting port 80, not a limitation in Squid. # Ports flagged 'transparent', 'intercept', or 'tproxy' have # authentication disabled. Guess I can't use authentication with a transparent setup. Will have to investigate intercept proxy. I'm trying to use Cisco WCCP via our Cisco 5505's so if I go intercept proxy and the Squid server goes offline, Internet traffic can still go through. On Wed, 20 Jul 2011 10:21:47 -0600 Chad Naugle wrote Simple answer: SARG (or any log analyzer) requires Squid to post usernames in the access log, by using authentication helpers. I am not certain if this can be done in Transparent or Intercept mode at all. chinner999 7/20/2011 12:11 PM Hi guys, I have SARG running and the reports shows usage per user by ip address. How do I get it to show username instead? The users are using Active Directory. I don't have Squid configured for any authentication currently. Ubuntu v10.04 Sarg v2.2.7.1 Squid v3.1.6 - transparent Thanks. Travel Impressions made the following annotations - This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you.
Re: [squid-users] SARG: The date range passed as argument is not formatted as dd/mm/yyyy-dd/mm/yyyy
Hi guys, That worked. I was missing a - in the 2nd line of the /usr/sbin/sarg-daily-report TODAY=$(date +%d/%m/%Y) YESTERDAY=$(date --date 1day ago +%d/%m/%Y) sarg /var/log/squid3/access.log -o /var/www/squid-reports/daily -z -d $YESTERDAY-$TODAY /usr/sbin/squid3 -k rotate exit 0 I modified sarg-weekly-report and sarg-monthly-report accordingly. On Tue, 19 Jul 2011 00:26:00 -0600 Helmut Hullen wrote Hallo, chinner999, Du meintest am 18.07.11: /usr/sbin/sarg-daily-report TODAY=$(date +%/%m/%d) YESTERDAY=$(date -date 1 day ago +%/%m/%d) --date Viele Gruesse! Helmut
[squid-users] SARG: The date range passed as argument is not formatted as dd/mm/yyyy-dd/mm/yyyy
Hi guys, SARG question. Setup Ubuntu v10.00 Squid v2.2.7.1 Squid v3.1.6 Followed instructions here to setup SARG. (http://www.udiniqgeek.com/sarg_ubuntu.html) - updated /var/log/squid to /var/log/squid3 sudo /usr/sbin/sarg-daily-report I'm getting the following error. SARG: The date range passed as argument is not formatted as dd/mm/-dd/mm/. /usr/sbin/sarg-daily-report TODAY=$(date +%d/%m/%Y) YESTERDAY=$(date –date “1 day ago” +%d/%m/%Y) sarg /var/log/squid3/access.log -o /var/www/squid-reports/daily -z -d $YESTERDAY-$TODAY /usr/sbin/squid3 -k rotate exit 0 Any suggestions? Thanks.
Re: [squid-users] SARG: The date range passed as argument is not formatted as dd/mm/yyyy-dd/mm/yyyy
No dice. Tried your suggestion. Here are the results. /usr/sbin/sarg-daily-report TODAY=$(date +%/%m/%d) YESTERDAY=$(date -date 1 day ago +%/%m/%d) sarg /var/log/squid3/access.log -o /var/www/squid-reports/daily -z -d $YESTERDAY-$TODAY /usr/sbin/squid3 -k rotate exit 0 sudo /usr/sbin/sarg-daily-report I get the following. date: extra operand `+%/%m/%d' Try `date --help' for more information. SARG: The date range passed as argument is not formated as dd/mm/-dd/mm/. I also tried TODAY=$(date +%m/%d/%) YESTERDAY=$(date -date 1 day ago +%m/%d/%) sarg /var/log/squid3/access.log -o /var/www/squid-reports/daily -z -d $YESTERDAY-$TODAY /usr/sbin/squid3 -k rotate exit 0 sudo /usr/sbin/sarg-daily-report date: extra operand `+%m/%d/%' Try `date --help' for more information. SARG: The date range passed as argument is not formated as dd/mm/-dd/mm/. On Mon, 18 Jul 2011 14:27:37 -0600 Chad Naugle wrote Try ISO 8601 format, -MM-DD. SARG is somewhat buggy. chinner999 7/18/2011 4:22 PM Hi guys, SARG question. Setup Ubuntu v10.00 Squid v2.2.7.1 Squid v3.1.6 Followed instructions here to setup SARG. (http://www.udiniqgeek.com/sarg_ubuntu.html) - updated /var/log/squid to /var/log/squid3 sudo /usr/sbin/sarg-daily-report I'm getting the following error. SARG: The date range passed as argument is not formatted as dd/mm/-dd/mm/. /usr/sbin/sarg-daily-report TODAY=$(date +%d/%m/%Y) YESTERDAY=$(date –date “1 day ago” +%d/%m/%Y) sarg /var/log/squid3/access.log -o /var/www/squid-reports/daily -z -d $YESTERDAY-$TODAY /usr/sbin/squid3 -k rotate exit 0 Any suggestions? Thanks. Travel Impressions made the following annotations - This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you.
