Всем доброго ...
Hi,  
Используется sarg-2.0.2 Nov-22-2004 on a ASP Linux 9.2(2.4.22-1.2154.nptl.asp) with squid-Version 2.5.STABLE4

Config /etc/sarg2/sarg.conf:  

language English 
access_log /var/log/squid/access.log 
graphs yes 
graph_days_bytes_bar_color orange 
title "Squid User Access Reports" 
font_face Tahoma,Verdana,Arial 
header_color darkblue 
header_bgcolor blanchedalmond 
font_size 9px 
header_font_size 9px 
title_font_size 11px 
background_color white 
text_color #000000 
text_bgcolor lavender 
title_color green 
logo_image none 
logo_text "Hi Users" 
logo_text_color #000000 
temporary_dir /tmp 
output_dir /var/www/html/squid 
resolve_ip yes 
user_ip yes 
topuser_sort_field BYTES reverse 
user_sort_field BYTES reverse 
exclude_hosts /etc/sarg2/exclude_hosts 
date_format e 
lastlog 0 
remove_temp_files yes 
index yes 
overwrite_report yes 
records_without_userid ip 
use_comma no 
mail_utility mail 
topsites_num 100 
topsites_sort_order BYTES D 
index_sort_order D 
exclude_codes /etc/sarg2/exclude_codes 
max_elapsed 28800000 
report_type topsites sites_users users_sites date_time denied auth_failures 
usertab /etc/hosts 
long_url no 
date_time_by bytes 
charset Latin1 
show_successful_message yes 
show_read_statistics yes 
topuser_fields NUM DATE_TIME USERID CONNECT BYTES %BYTES IN-CACHE-OUT USED_TIME MILISEC %TIME TOTAL AVERAGE 
user_report_fields CONNECT BYTES %BYTES IN-CACHE-OUT USED_TIME MILISEC %TIME TOTAL AVERAGE 
topuser_num 0 
site_user_time_date_type list 
datafile none 
show_sarg_info yes 
show_sarg_logo no 
parsed_output_log /etc/sarg2/log 
parsed_output_log_compress /bin/gzip 
displayed_values bytes 
download_suffix "zip,bzip,gz,rpm,doc,iso,bin,cab,com,mdb,mso,rtf,src,sys,exe,mp3,avi,mpg,mpeg,swf"

Logs file in Squid log format:  

1103617285.712 3301 192.168.0.103 TCP_REFRESH_HIT/304 277 GET http://portal.sysadmins.ru/board/templates/subSilver/formIE.css - DIRECT/195.161.115.101 - 

/etc/hosts:

192.168.0.103 V_NMad 

/etc/sarg2/exclude_hosts:
[V_NMad@Router sarg2]# cat exclude_hosts

mp3.alkar.net 
download-od1.alkar.net 
download-od2.alkar.net 
download-kv1.alkar.net 
download-kv2.alkar.net 
download-dp1.alkar.net 
download-dp2.alkar.net 
http://www.video.alkar.net 

/etc/sarg2/exclude_codes:

NONE/400 

[V_NMad@Router sarg2]# sarg -x -z -d 21/12/2004-22/12/2004 -i yes

SARG: Init 
SARG: Loading configuration from: /etc/sarg2/sarg.conf 
SARG: ConfigFile.........= /etc/sarg2/sarg.conf 
SARG: AccessLog..........= /var/log/squid/access.log 
SARG: BgColor............= white 
SARG: TxColor............= #000000 
SARG: TxBgColor..........= lavender 
SARG: TiColor............= green 
SARG: LogoImage..........= 
SARG: LogoText...........= Hi Users 
SARG: LogoTextColor......= #000000 
SARG: Width..............= 80 
SARG: Height.............= 45 
SARG: Title..............= Squid User Access Reports 
SARG: BgImage............= 
SARG: FontFace...........= Tahoma,Verdana,Arial 
SARG: HeaderColor........= darkblue 
SARG: HeaderBgColor......= blanchedalmond 
SARG: FontSize...........= 9px 
SARG: PasswdFile.........= 
SARG: TempDir............= /tmp 
SARG: OutputDir..........= /var/www/html/squid 
SARG: Ip2Name............= yes 
SARG: TopuserSortField.........= BYTES 
SARG: UserSortField.........= BYTES 
SARG: TopuserSortOrder.........= reverse 
SARG: UserSortOrder.........= reverse 
SARG: UserAgentLog.......= 
SARG: ExcludeHosts.......= /etc/sarg2/exclude_hosts 
SARG: DateFormat.........= e 
SARG: ExcludeUsers.......= 
SARG: PerUserLimitFile...= 
SARG: PerUserLimit.......= 
SARG: UserIp.............= yes 
SARG: MaxElapsed.........= 28800000 
SARG: LastLog............= 0 
SARG: 
SARG: Loading exclude file from: /etc/sarg2/exclude_hosts 
SARG: Parameters: 
SARG: 
SARG: Hostname or IP address (-a) = 
SARG: Useragent log (-b) = 
SARG: Exclude file (-c) = /etc/sarg2/exclude_hosts 
SARG: Date from-until (-d) = 21/12/2004-22/12/2004 
SARG: Email address to send reports (-e) = 
SARG: Config file (-f) = /etc/sarg2/sarg.conf 
SARG: Date format (-g) = Europe (dd/mm/yyyy) 
SARG: IP report (-i) = Yes 
SARG: Input log (-l) = /var/log/squid/access.log 
SARG: Resolve IP Address (-n) = Yes 
SARG: Output dir (-o) = /var/www/html/squid/ 
SARG: Use Ip Address instead of userid (-p) = Yes 
SARG: Accessed site (-s) = 
SARG: Time (-t) = 
SARG: User (-u) = 
SARG: Temporary dir (-w) = /tmp 
SARG: Debug messages (-x) = Yes 
SARG: Process messages (-z) = Yes 
SARG: 
SARG: sarg version: 2.0.2 Nov-22-2004 
SARG: Loading User table: /etc/hosts 
SARG: Reading access log file: /var/log/squid/access.log 
SARG: Records in file: 25142, reading: 100.00% 
SARG: Records read: 25142, written: 0, excluded: 25142 
SARG: Squid log format 
SARG: No records found 
SARG: End

В логе 100 % есть 21/22 december ...

q: Кстате по ходу дела ПАПКА для output html НЕ СОЗДАНА, САРГ ее создает во время работы и сортировки ? Или во время установки программы? Если во время установки то какие должны быть права на папку ?

Thx for help