[silvaleandrodp]

O que eu queria não funcionou ainda, o DNS Proxy estava ativo e na aba DNS routing estava o ip do meu principal servidor DNS interno que no caso é 10.10.1.100

Porem so funcionou quando eu informei o dns do googgle 8.8.8.8 na configuração da rede no painel do endian.

[silvaleandrodp]

Logs do sistema referentes ao cron com o filtro daily

################## Dia 6 #####################

Mar 5 01:25:00 fcron Job [ -x /bin/run-parts ] && run-parts –report /etc/cron.daily started for user root (pid 3193)

Mar 5 07:20:24 fcron Job [ -x /bin/run-parts ] && run-parts –report /etc/cron.daily terminated (exit status: 1)

Mar 5 13:50:22 fcron Job [ -x /bin/run-parts ] && run-parts –report /etc/anacron.daily started for user root (pid 9277)

Mar 5 13:50:24 fcron Job [ -x /bin/run-parts ] && run-parts –report /etc/anacron.daily completed

################## Dia 6 #####################

Mar 6 01:25:00 fcron Job [ -x /bin/run-parts ] && run-parts –report /etc/cron.daily started for user root (pid 18282)

Mar 6 13:50:22 fcron Job [ -x /bin/run-parts ] && run-parts –report /etc/anacron.daily started for user root (pid 1132)

Mar 6 13:50:24 fcron Job [ -x /bin/run-parts ] && run-parts –report /etc/anacron.daily completed

################## Dia 7 #####################

Mar 7 01:25:00 fcron process already running: root’s [ -x /bin/run-parts ] && run-parts –report /etc/cron.daily

[silvaleandrodp]

Eu estou com um problema na mesma linha

Eu instalei o endian e hábilitei o proxy não transparente na quinta dia 28-02-2013 e o sarg apresenta no endereço https://10.10.1.6:10443/sarg/daily/index.html as visualizações:

2013Mar04-2013Mar04

2013Mar03-2013Mar03

2013Mar02-2013Mar02

2013Mar01-2013Mar01

Porem as do dia 2013Mar05-2013Mar05 e 2013Mar06-2013Mar06 não são mostradas na web, mas foram criadas dentro da pasta /var/www/sarg/daily/ assim como as outras.

A visualização 2013Mar05-2013Mar05 contem todas as informações ja a 2013Mar06-2013Mar06 contem somente as seguintes pastas e arquivos:

root@efw:~ # ls -la /var/www/sarg/daily/2013Mar06-2013Mar06/

total 112

drwxr-xr-x 3 root root 4096 Mar 7 11:13 .

drwxr-xr-x 9 root root 4096 Mar 7 11:12 ..

drwxr-xr-x 2 root root 24576 Mar 7 11:53 10.10.1.20

-rw-r–r– 1 root root 29 Mar 7 11:12 date

-rw-r–r– 1 root root 68887 Mar 7 11:53 general

-rw-r–r– 1 root root 19 Mar 7 11:12 period

Eu acho que pode ter ocorrido algum erro com a execução do script do sarg pelo cron mas eu não sei como apurar isso, abaixo segue mais algumas informações de configuração do endian:

###################### Configuração do Sarg ######################

root@efw:~ # cat /etc/sarg/sarg.conf

charset UTF-8

language en

access_log /var/log/squid/access.log

graphs no

title “Endian Firewall HTTP Proxy Access Reports”

output_dir /var/www/sarg/ONE-SHOT

resolve_ip yes

lastlog 12

index yes

overwrite_report yes

mail_utility mail

long_url no

privacy no

dansguardian_conf /etc/sarg/dansguardian.conf

show_sarg_info no

show_sarg_logo no

external_css_file /usr/share/sarg/sarg.css

realtime_refresh_time 5

realtime_access_log_lines 500

realtime_types GET,PUT,CONNECT

realtime_unauthenticated_records: show

exclude_users /etc/sarg/exclude_users

temporary_dir /var/tmp

###################### Scripts dentro do cron.daily ######################

root@efw:~ # ls -la /etc/cron.daily/

total 48

drwxr-xr-x 2 root root 4096 Feb 28 18:17 .

drwxr-xr-x 82 root root 4096 Mar 7 08:31 ..

-rwxr-xr-x 1 root root 156 Jul 30 2009 amavisd

-rwxr-xr-x 1 root root 98 Apr 13 2011 clamav

-rwx

---

1 root root 65 Jul 28 2011 havp

-rwxr-xr-x 1 root root 267 Jun 3 2011 logwatch

-rwxr-xr-x 1 root root 59 Jan 4 2012 restartcollectd

-rwxr-xr-x 1 root root 296 May 2 2011 rpm

lrwxrwxrwx 1 root root 28 Feb 28 18:17 sa-update -> /usr/local/bin/run-sa-update

-rwxr-xr-x 1 root root 1031 Oct 7 2011 sarg

-rwxr-xr-x 1 root root 129 Jan 26 2012 setddns

-rwx

---

1 root root 93 Aug 11 2009 tmpwatch

-rwxr-xr-x 1 root root 52 Dec 14 2011 usbbackup

###################### Script do Sarg ######################

root@efw:~ # cat /etc/cron.daily/sarg

#!/bin/bash

if [ -f /etc/sysconfig/sarg ]; then

. /etc/sysconfig/sarg

fi

[ “$SARG_ENABLED” == “on” ] || exit 0

# remove all daily sarg reports older than $SARG_RETENTION days

/usr/bin/find

/var/www/sarg/daily

-mindepth 1

-maxdepth 1

-mtime +$SARG_RETENTION

-type d | xargs /bin/rm -rf

function create_log_argv() {

local LOG=$(echo “$1” | sed s,/var/log,/var/log/archives,)

local COUNT=$2

ls -1 “$LOG”-*gz 2>/dev/null | tail -${COUNT} | while read F; do

echo -n “-l $F “

done

}

# Get yesterday’s date

YESTERDAY=$(date –date “yesterday” +%d/%m/%Y)

LOG_FILES=

LOG=”/var/log/squid/access.log”

# this is to be backwards compatible

if [ -s “$LOG.1.gz” ]; then

LOG_FILES=”$LOG_FILES -l $LOG.1.gz”

fi

LOG_FILES=”$LOG_FILES $(create_log_argv $LOG 1)”

if [ -s “$LOG” ]; then

LOG_FILES=”$LOG_FILES -l $LOG”

fi

# if no logfiles are present then exit

[ -z “$LOG_FILES” ] && exit 0

exec /usr/bin/sarg

$LOG_FILES

-o /var/www/sarg/daily

-d $YESTERDAY &>/dev/null

exit 0

[Autor]

Posts