Compiled and installed svn 3641 and I noticed two things: Error Opening file ./GeoLiteCity.dat Thu Dec 11 02:37:33 2008 GeoIP: loaded config file /usr/local/etc/ntop/GeoLiteCity.dat Error Opening file ./GeoIPASNum.dat Thu Dec 11 02:37:33 2008 GeoIP: loaded ASN config file /usr/local/etc/ntop/GeoIPASNum.dat ^^ I think if ntop successfully loads the GeoLiteCity.dat and GeoIPASNum.dat files then the error messages about these files should be suppressed. I think the error messages about these 2 files should only be displayed if ntop cannot load them.
and the second: [EMAIL PROTECTED] GeoIP]# pwd /usr/local/share/GeoIP [EMAIL PROTECTED] GeoIP]# ls -alh total 1.2M drwxr-xr-x 2 root root 4.0K Dec 11 02:19 . drwxr-xr-x 23 root root 4.0K Dec 11 02:19 .. -rw-r--r-- 1 root root 1.1M Dec 11 02:19 GeoIP.dat [EMAIL PROTECTED] GeoIP]# ^^ nice. The make install created this directory and put the GeoIP.dat file there. If ntop is using this GeoIP.dat file as well, shouldn't there be a message similar to: Thu Dec 11 02:37:33 2008 GeoIP: loaded config file /usr/local/share/GeoIP/GeoIP.dat ?? ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <ntop-dev@unipi.it> Sent: Saturday, November 22, 2008 3:38 PM Subject: Re: [Ntop-dev] NST integration with ntop v3.3.9 > While doing a 2nd compile of svn 3627 to check for a different matter I > noticed this when autogen.sh was compiling GeoIP: > Making all in libGeoIP > make[1]: Entering directory `/root/ntopchecksctp/ntop/GeoIP-1.4.5/libGeoIP' > /bin/sh ../libtool --mode=compile > gcc -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" > -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREP > ORT=\"\" -DPACKAGE=\"GeoIP\" -DVERSION=\"1.4.5\" -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_ > STRING_H=1 > -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 > -DHAVE_UNISTD_H=1 -DHAVE_DLFCN_H=1 -DHAVE_USHORT_TYPED EF > =1 -DHAVE_ > ULONG_TYPEDEF=1 -DLITTLE_ENDIAN_HOST=1 -DHAVE_STDINT_H=1 -DHAVE_ZLIB_H=1 -DHAVE_GETHOSTBYNAME=1 -DHAVE_GETHOSTBYNAME_R=1 -DGETHOSTBY > NAME_R_RET > URNS_INT=1 -DDEFAULT_DBDIR=\"NONE/share/GeoIP\" -I. -I. > -DGEOIPDATADIR=\"/usr/local/share/GeoIP\" -Wall -g -O2 -c GeoIP.c > > and I wondered if the reason why ntop isn't producing an error message about > the GeoIP.dat file is because ntop is looking for it in > either: > /usr/local/share/GeoIP > /usr/share/GeoIP > /share/GeoIP > > While I don't have either: > /usr/local/share/GeoIP > or > /share/GeoIP > I do have a /usr/share/GeoIP and the files in it are very, very old: > [EMAIL PROTECTED] ~]# ls -alh /usr/share/GeoIP > total 26M > drwxr-xr-x 2 root root 4.0K Nov 24 2006 . > drwxr-xr-x 91 root root 4.0K Jun 8 15:30 .. > -rw-r--r-- 1 root root 849K Jul 18 2006 GeoIP.dat > -rw-r--r-- 1 root root 25M Aug 5 2006 GeoLiteCity.dat > [EMAIL PROTECTED] ~]# > > > Should ntop during the make install stage copy GeoIPASNum.dat, > GeoLiteCity.dat, and GeoIP-1.4.5/data/GeoIP.dat into one or more of > these directories: > /usr/local/share/GeoIP > /usr/share/GeoIP > /share/GeoIP > > and/or into its own private directory: > /usr/local/etc/ntop/ > > > > > ----- Original Message ----- > From: <[EMAIL PROTECTED]> > To: <ntop-dev@unipi.it> > Sent: Saturday, November 22, 2008 2:15 PM > Subject: Re: [Ntop-dev] NST integration with ntop v3.3.9 > > > > Gday Ronald, > > > > I'm running svn: 3627 and I also received the same error messages: > > Error Opening file ./GeoLiteCity.dat > > Error Opening file /usr/local/etc/ntop/GeoLiteCity.dat > > Error Opening file /usr/local/etc/ntop/GeoLiteCity.dat > > Error Opening file /etc/GeoLiteCity.dat > > Sat Nov 22 13:53:42 2008 **ERROR** GeoIP: unable to load file > > GeoLiteCity.dat > > Error Opening file ./GeoIPASNum.dat > > Error Opening file /usr/local/etc/ntop/GeoIPASNum.dat > > Error Opening file /usr/local/etc/ntop/GeoIPASNum.dat > > Error Opening file /etc/GeoIPASNum.dat > > Sat Nov 22 13:53:42 2008 **ERROR** GeoIP: unable to load ASN file > > GeoIPASNum.dat > > Sat Nov 22 13:53:42 2008 Database support not compiled into ntop > > ^^ I wonder why the error messages don't mention the GeoIP.dat file. > > > > > > BTW with svn 3627 I noticed that the GeoIP data sets were downloaded > > automatically during the make stage. > > > > > > I think the error is caused by leaving the GeoIP data sets in the compile > > directory i.e. they were not installed: > > ntop-revision3627/ntop/GeoIPASNum.dat > > ntop-revision3627/ntop/GeoLiteCity.dat > > ntop-revision3627/ntop/GeoIP-1.4.5/data/GeoIP.dat > > ^^ Copying these 3 files into /usr/local/etc/ntop/ reduces the error > > messages down to: > > Error Opening file ./GeoLiteCity.dat > > Sat Nov 22 14:12:11 2008 GeoIP: loaded config file > > /usr/local/etc/ntop/GeoLiteCity.dat > > Error Opening file ./GeoIPASNum.dat > > Sat Nov 22 14:12:11 2008 GeoIP: loaded ASN config file > > /usr/local/etc/ntop/GeoIPASNum.dat > > Sat Nov 22 14:12:11 2008 Database support not compiled into ntop > > ^^ Again no mention of the GeoIP.dat file. > > > > I hope this helps you with some of your problems. > > > > Hooroo. > > > > > > > > ----- Original Message ----- > > From: "Ronald W. Henderson" <[EMAIL PROTECTED]> > > To: <ntop-dev@unipi.it> > > Sent: Saturday, November 22, 2008 12:57 PM > > Subject: [Ntop-dev] NST integration with ntop v3.3.9 > > > > > > > Luca: > > > > > > I have been working hard on integrating your latest ntop v3.3.9 svn: 3327 > > > into NST (network security toolkit) for pending release v1.8.1. You have > > > done a very nice job with the GeoIP integration. I now download the GeoIP > > > data sets if requested by the user for ntop. > > > > > > I have created a web interface in the NST WUI to start up and > > > monitor ntop. > > > > > > I am having the following issues: > > > > > > 1) I can not control the sticky state. The Hosts keep getting purged. > > > I use the "-c" command line value and have selected the web interface > > > value in Startup Options: Sticky Hosts (-c) to "Yes". > > > The ntop.stickyHosts value in Preferences is set to "1" > > > Then I restart ntop and hosts keep getting purged. > > > > > > 2) On start up even if ntop has found the GeoIP data sets it will still > > > issue a error message: > > > Error Opening file ./GeoLiteCity.dat > > > Error Opening file /usr/local/etc/ntop/GeoLiteCity.dat > > > Error Opening file /usr/local/etc/ntop/GeoLiteCity.dat > > > Error Opening file ./GeoIPASNum.dat > > > Error Opening file /usr/local/etc/ntop/GeoIPASNum.dat > > > Error Opening file /usr/local/etc/ntop/GeoIPASNum.dat > > > > > > Hopefully you can help... > > > > > > Ronald W. Henderson > > > > > > - CoAuthor of NST... > > > > > > _______________________________________________ > > > Ntop-dev mailing list > > > Ntop-dev@unipi.it > > > http://listgateway.unipi.it/mailman/listinfo/ntop-dev > > _______________________________________________ > > Ntop-dev mailing list > > Ntop-dev@unipi.it > > http://listgateway.unipi.it/mailman/listinfo/ntop-dev > > _______________________________________________ > Ntop-dev mailing list > Ntop-dev@unipi.it > http://listgateway.unipi.it/mailman/listinfo/ntop-dev _______________________________________________ Ntop-dev mailing list Ntop-dev@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop-dev
