ldavisson
November 5th, 2009, 02:07 PM
I have rebuilt the access file. I think it might be that we have some long FQDN but in the log they are all ip addresses. I am using the dansguardian log right now
sudo sarg
SARG: getword loop detected.
SARG: searching for 'x20'
SARG: Maybe you have a broken record or garbarge in your access.log file.
Here are few of the lines from the Access file.
1257270662.816 168 192.168.1.225 TCP_MISS/301 141 GET http://yahoo.com - DEFAULT_PARENT/127.0.0.1 -
Please let me know if you need any conf files.
sudo sarg
SARG: getword loop detected.
SARG: searching for 'x20'
SARG: Maybe you have a broken record or garbarge in your access.log file.
Here are few of the lines from the Access file.
1257270662.816 168 192.168.1.225 TCP_MISS/301 141 GET http://yahoo.com - DEFAULT_PARENT/127.0.0.1 -
Please let me know if you need any conf files.