W dniu 04.04.2013 19:14, Luca Deri pisze:
>> But it does detect those files:
>>
>> 04/Apr/2013 12:40:39 [util.c:298] GeoIP: loaded AS config file
>> GeoIPASNum.dat
>> 04/Apr/2013 12:40:39 [util.c:307] GeoIP: loaded AS IPv6 config file
>> GeoIPASNumv6.dat
>>
>> But using it with:
>>
>> --city-list /usr/local/nprobe/GeoLiteCity.dat -A
>> /usr/local/nprobe/GeoIPASNum.dat
>>
>> I still get:
>>
>> Invalid database type (null), expected GeoIP Organization Edition
>
> 04/Apr/2013 19:13:45 [nprobe.c:4502] GEO-533LITE 20120904 Build 1 Copyright
> (c) 2012 MaxMind Inc All Rights Reserved
> 04/Apr/2013 19:13:45 [nprobe.c:4504] GEO-117 20120902 Build 1 Copyright (c)
> 2012 MaxMind Inc All Rights Reserved
> This is my output. Please download the .dat files again
>
I did download them again and it did not help. Also I don't get that
output with MaxMind and so on. Maybe I need to enable some kind of
debug? Also I tried strace on:
/usr/local/bin/nprobe -n 80.245.176.15:9999 -i dna0 -V 9
And here are all opens (strace -etrace=open):
open("/etc/ld.so.cache", O_RDONLY) = 3
open("/lib/libm.so.6", O_RDONLY) = 3
open("/usr/local/lib/libnprobe-6.12.130404.so", O_RDONLY) = 3
open("/usr/lib/libGeoIP.so.1", O_RDONLY) = 3
open("/lib/libresolv.so.2", O_RDONLY) = 3
open("/lib/librt.so.1", O_RDONLY) = 3
open("/lib/libdl.so.2", O_RDONLY) = 3
open("/lib/libpthread.so.0", O_RDONLY) = 3
open("/usr/local/lib/libpcap.so.1", O_RDONLY) = 3
open("/lib/libc.so.6", O_RDONLY) = 3
open("/etc/nsswitch.conf", O_RDONLY) = 3
open("/etc/ld.so.cache", O_RDONLY) = 3
open("/lib/tls/x86_64/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such
file or directory)
open("/lib/tls/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/lib/x86_64/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file
or directory)
open("/lib/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/usr/lib/tls/x86_64/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No
such file or directory)
open("/usr/lib/tls/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file
or directory)
open("/usr/lib/x86_64/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such
file or directory)
open("/usr/lib/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/lib/x86_64-linux-gnu/tls/x86_64/libnss_db.so.2", O_RDONLY) = -1
ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/tls/libnss_db.so.2", O_RDONLY) = -1 ENOENT
(No such file or directory)
open("/lib/x86_64-linux-gnu/x86_64/libnss_db.so.2", O_RDONLY) = -1
ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No
such file or directory)
open("/usr/lib/x86_64-linux-gnu/tls/x86_64/libnss_db.so.2", O_RDONLY) =
-1 ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/tls/libnss_db.so.2", O_RDONLY) = -1
ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/x86_64/libnss_db.so.2", O_RDONLY) = -1
ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/libnss_db.so.2", O_RDONLY) = -1 ENOENT
(No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 3
open("/lib/libnss_files.so.2", O_RDONLY) = 3
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
open("/etc/services", O_RDONLY|O_CLOEXEC) = 4
open("/etc/resolv.conf", O_RDONLY) = 5
open("/etc/localtime", O_RDONLY) = 6
open("nprobe.license", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/etc/nprobe.license", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/sys/devices/system/cpu",
O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 6
open("./plugins", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = -1 ENOENT
(No such file or directory)
open("/usr/local/lib/nprobe/plugins",
O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = -1 ENOENT (No such file or
directory)
open("GeoIPASNum.dat", O_RDONLY) = 6
open("GeoIPASNumv6.dat", O_RDONLY) = 7
open("dna0", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/proc/net/pf_ring/dev/dna0/info", O_RDONLY) = 8
open("/etc/pf_ring/90E2BA371302", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/etc/pf_ring/90e2ba371302", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/dev/tsctl0", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/etc/ld.so.cache", O_RDONLY) = 10
open("/lib/libnss_compat.so.2", O_RDONLY) = 10
open("/lib/libnsl.so.1", O_RDONLY) = 10
open("/etc/ld.so.cache", O_RDONLY) = 10
open("/lib/libnss_nis.so.2", O_RDONLY) = 10
open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 10
So it seems it satisfied all required files for geoip. Also when I look
trough netflow dump in nfdump I can see that IPv4 flows have ASn
information, but IPv6 does not. Also when i try a strace on that:
/usr/local/bin/nprobe -n 80.245.176.15:9999 -i dna0 -V 9 --as-list
/usr/local/nprobe/GeoIPASNum.dat --city-list
/usr/local/nprobe/GeoLiteCity.dat
It shows:
open("/etc/ld.so.cache", O_RDONLY) = 3
open("/lib/libm.so.6", O_RDONLY) = 3
open("/usr/local/lib/libnprobe-6.12.130404.so", O_RDONLY) = 3
open("/usr/lib/libGeoIP.so.1", O_RDONLY) = 3
open("/lib/libresolv.so.2", O_RDONLY) = 3
open("/lib/librt.so.1", O_RDONLY) = 3
open("/lib/libdl.so.2", O_RDONLY) = 3
open("/lib/libpthread.so.0", O_RDONLY) = 3
open("/usr/local/lib/libpcap.so.1", O_RDONLY) = 3
open("/lib/libc.so.6", O_RDONLY) = 3
open("/etc/nsswitch.conf", O_RDONLY) = 3
open("/etc/ld.so.cache", O_RDONLY) = 3
open("/lib/tls/x86_64/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such
file or directory)
open("/lib/tls/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/lib/x86_64/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file
or directory)
open("/lib/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/usr/lib/tls/x86_64/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No
such file or directory)
open("/usr/lib/tls/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file
or directory)
open("/usr/lib/x86_64/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such
file or directory)
open("/usr/lib/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/lib/x86_64-linux-gnu/tls/x86_64/libnss_db.so.2", O_RDONLY) = -1
ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/tls/libnss_db.so.2", O_RDONLY) = -1 ENOENT
(No such file or directory)
open("/lib/x86_64-linux-gnu/x86_64/libnss_db.so.2", O_RDONLY) = -1
ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No
such file or directory)
open("/usr/lib/x86_64-linux-gnu/tls/x86_64/libnss_db.so.2", O_RDONLY) =
-1 ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/tls/libnss_db.so.2", O_RDONLY) = -1
ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/x86_64/libnss_db.so.2", O_RDONLY) = -1
ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/libnss_db.so.2", O_RDONLY) = -1 ENOENT
(No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 3
open("/lib/libnss_files.so.2", O_RDONLY) = 3
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
open("/etc/services", O_RDONLY|O_CLOEXEC) = 4
open("/etc/resolv.conf", O_RDONLY) = 5
open("/usr/local/nprobe/GeoIPASNum.dat", O_RDONLY) = 6
open("/etc/localtime", O_RDONLY) = 7
open("/usr/local/nprobe/GeoIPASNumv6.dat", O_RDONLY) = 7
open("/usr/local/nprobe/GeoLiteCity.dat", O_RDONLY) = 8
open("/usr/local/nprobe/GeoLiteCityv6.dat", O_RDONLY) = 9
open("nprobe.license", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/etc/nprobe.license", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/sys/devices/system/cpu",
O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 10
open("./plugins", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = -1 ENOENT
(No such file or directory)
open("/usr/local/lib/nprobe/plugins",
O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = -1 ENOENT (No such file or
directory)
open("dna0", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/proc/net/pf_ring/dev/dna0/info", O_RDONLY) = 8
open("/etc/pf_ring/90E2BA371302", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/etc/pf_ring/90e2ba371302", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/dev/tsctl0", O_RDONLY) = -1 ENOENT (No such file or
directory)
open("/etc/ld.so.cache", O_RDONLY) = 11
open("/lib/libnss_compat.so.2", O_RDONLY) = 11
open("/lib/libnsl.so.1", O_RDONLY) = 11
open("/etc/ld.so.cache", O_RDONLY) = 11
open("/lib/libnss_nis.so.2", O_RDONLY) = 11
open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 11
So now it reads two more files and still gives:
Invalid database type (null), expected GeoIP Organization Edition
So what is wrong?
Thanks!
--
Michał Margula, [email protected], http://alchemyx.uznam.net.pl/
"W życiu piękne są tylko chwile" [Ryszard Riedel]
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
