Koozali.org: home of the SME Server

sarg

Offline jameswilson

  • ****
  • 739
  • +0/-0
    • Security Warehouse, trade security equipment
sarg
« on: August 18, 2017, 07:10:14 PM »
I have a suspicion of excessive social media usage on our network and would like to monitor it.
I have installed sarg but the log files of squid are empty so I assume it cant do its think.
I also assume as I'm not using dansguardian that the dg bits in the wiki are irrelevant?

Thanks

Offline Jean-Philippe Pialasse

  • *
  • 2,762
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: sarg
« Reply #1 on: August 18, 2017, 08:11:31 PM »
Indeed for dg.

Do you have transparent proxy activated ? If squid is deactivated, sarg is useless.

Offline jameswilson

  • ****
  • 739
  • +0/-0
    • Security Warehouse, trade security equipment
Re: sarg
« Reply #2 on: August 19, 2017, 01:37:59 PM »
Is that http proxy in server manager?
Is there another contrib that will do it?

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: sarg
« Reply #3 on: August 19, 2017, 02:01:24 PM »
jameswilson

Transparent proxy is the sme server default, so unless you change dit, it should be set.

From
https://wiki.contribs.org/Dansguardian#Configuring_your_system_to_force_Dansguardian_usage_.26_prevent_bypassing
To return Transparent Proxy port to default value and to disable portblocking and to enable the Transparent proxy (which is the sme default)
config setprop squid TransparentPort 3128
config setprop squid Transparent yes
config delprop dansguardian portblocking
signal-event post-upgrade; signal-event reboot


Also from
https://wiki.contribs.org/Sarg#Troubleshooting
Did you do this
/usr/bin/sarg
/etc/cron.daily/sarg
/etc/cron.weekly/sarg
/etc/cron.monthly/sarg
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline Jean-Philippe Pialasse

  • *
  • 2,762
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: sarg
« Reply #4 on: August 19, 2017, 03:58:01 PM »
Is that http proxy in server manager?
Is there another contrib that will do it?

Indeed this is this one. Check if it is still enabled.

jameswilson

Transparent proxy is the sme server default, so unless you change dit, it should be set.

From
https://wiki.contribs.org/Dansguardian#Configuring_your_system_to_force_Dansguardian_usage_.26_prevent_bypassing
To return Transparent Proxy port to default value and to disable portblocking and to enable the Transparent proxy (which is the sme default)
config setprop squid TransparentPort 3128
config setprop squid Transparent yes
config delprop dansguardian portblocking
signal-event post-upgrade; signal-event reboot

As you do not use dansguardian you donnot need this




Also from
https://wiki.contribs.org/Sarg#Troubleshooting
Did you do this
/usr/bin/sarg
/etc/cron.daily/sarg
/etc/cron.weekly/sarg
/etc/cron.monthly/sarg


Indeed that is another point you need to populate the static result of sarg first or to wait for then to do so.