Michal,
1./3. use -w 512000 as it looks like you have a small hash for your
traffic. add "-b 1" to see how's the cache status
2. Please do
[--as-list|-A] <AS list> | GeoIP file containing the list of
known ASs.
| Example: GeoIPASNum.dat
--city-list <city list> | GeoIP file containing the city/IP
mapping. Note
| if present. Example: --city-list
GeoLiteCity.dat
| will also attempt to load
GeoLiteCityv6.dat
so something like -A GeoIPASNum.dat and --city-list GeoLiteCity.dat
Regards Luca
On 04/04/2013 11:54 AM, Michał Margula wrote:
Hello,
We have just purchased copy of a nprobe and it seems to be working fine,
but I have some strange output on console. For example when using it
without IPv6 flows support (NFv5) I get (issue #1):
04/Apr/2013 11:45:28 [engine.c:1932]
[maxBucketSearch=1][thread_id=0][idx=40204][packet_hash=2592251148][vlan=4][udp][92.42.116.234:24767
-> 62.87.149.65:12813][tos=0]
04/Apr/2013 11:45:29 [engine.c:1932]
[maxBucketSearch=2][thread_id=0][idx=38964][packet_hash=2958727220][vlan=178][tcp][80.245.176.180:4767
-> 95.100.210.110:443][tos=0]
And they show every few seconds. Also when I try it with -V 9 I get
(issue #2):
Invalid database type (null), expected GeoIP Organization Edition
and (issue #3):
04/Apr/2013 11:46:11 [nprobe.c:1883] WARNING: Your bucket search is too
slow (17): expect drops
About issue #2 I have those files:
GeoIPASNum.dat
GeoIPASNumv6.dat
GeoLiteCity.dat
GeoLiteCityv6.dat
About issue #3 does it mean that this server is too slow? I don't get
that message with NFv5.
Thanks!
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
