Re: [Ntop-misc] nProbe -A option

2018-05-07 Thread PEDRO RODRIGUES TORRES 
Hello Luca,

The -A option is able to change only src/dst ASN, right?
Even if a create a custom MMDB may I change de src/dst mask?

--
Pedro

2018-05-07 15:42 GMT+02:00 Luca Deri :

> Pedro
> yes we moved to geoid in recent versions. Please see
> https://blog.maxmind.com/2015/09/29/building-your-own-
> mmdb-database-for-fun-and-profit/ that explains you how to create your
> custom dat files
>
> Lyca
>
>
> On 7 May 2018, at 14:06, PEDRO RODRIGUES TORRES 
> wrote:
>
> Hello Luca,
>
> Possibly I read an old user guide:
> https://www.ntop.org/wp-content/uploads/2013/03/nProbe_UserGuide.pdf
>
> I think the problem to use de BGP Plugin in my scenery is due I need to
> process pcap files. I am not sure if the full BGP table will be loaded in
> nProbe prior to process the pcap files.
> Other problem is that bgp_probe_client.pl is not working for me... I need
> to debug it but if has some easy way to insert prefix/ASN in the probes,
> let me know.
>
> --
> Pedro
>
>
> 2018-05-07 12:51 GMT+02:00 Luca Deri :
> >
> > Pedro,
> > the file specified with -A has to be in GeoIP format, not text as you did
> >
> > Luca
> >
> > On 4 May 2018, at 18:20, PEDRO RODRIGUES TORRES 
> wrote:
> >
> > Hello,
> >
> > I am using nProbe Pro v.8.5.180504 ($Revision: 6149 $) for
> > x86_64-pc-linux-gnu with native PF_RING acceleration.
> >
> > I am trying to use -A option with a data file like this:
> > $ head -n 5 ASList.dat
> > 2116:212.89.60.0/24
> > 2116:212.89.59.0/24
> > 2116:212.89.58.0/24
> > 2116:212.89.57.0/24
> > 2116:212.89.56.0/24
> >
> > The command line used to start nProbe is:
> > nprobe -V9 --pcap-file-list myfilelist.txt -A ASList.dat
> >
> > I got this output:
> > ...
> > 04/May/2018 13:00:58 [util.c:465] GeoIP: loaded AS config file ASList.dat
> > 04/May/2018 13:00:58 [util.c:479] WARNING: Unable to load AS IPv6 file
> > ASListv6.dat. AS IPv6 support disabled
> > ...
> > 04/May/2018 13:00:58 [nprobe.c:8925] nProbe started successfully
> >
> >
> > The problem is that the exported dump is not being modified to include
> > srcas, dstas, srcmsk, dstmsk.
> > (the mask is the most important for me). I double checked it in my
> > local collector (nfdump).
> > A strange thing happen when I stop the nProbe with ctrl-c. I lot of
> > messages like this are printed:
> >
> > Invalid database type GeoIP Country Edition, expected GeoIP Organization
> Edition
> >
> > Yes, I could try to use the BGP Plugin, but currently I do not have a
> > easy BGP full routing router. :(
> >
> > I appreciate any help,
> > Pedro
> >
> > --
> > PEDRO RODRIGUES TORRES
> > Universidad Carlos III de Madrid
> > ___
> > Ntop-misc mailing list
> > Ntop-misc@listgateway.unipi.it
> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
> >
> >
> >
> > ___
> > Ntop-misc mailing list
> > Ntop-misc@listgateway.unipi.it
> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
>
>
> --
> PEDRO RODRIGUES TORRES
> Universidad Carlos III de Madrid
> ___
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
>
> ___
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>



-- 
PEDRO RODRIGUES TORRES
Universidad Carlos III de Madrid
___
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Re: [Ntop-misc] nProbe -A option

2018-05-07 Thread Luca Deri 
Pedro
yes we moved to geoid in recent versions. Please see 
https://blog.maxmind.com/2015/09/29/building-your-own-mmdb-database-for-fun-and-profit/
 

 that explains you how to create your custom dat files

Lyca

> On 7 May 2018, at 14:06, PEDRO RODRIGUES TORRES  wrote:
> 
> Hello Luca,
> 
> Possibly I read an old user guide: 
> https://www.ntop.org/wp-content/uploads/2013/03/nProbe_UserGuide.pdf 
> 
> 
> I think the problem to use de BGP Plugin in my scenery is due I need to 
> process pcap files. I am not sure if the full BGP table will be loaded in 
> nProbe prior to process the pcap files.
> Other problem is that bgp_probe_client.pl  is 
> not working for me... I need to debug it but if has some easy way to insert 
> prefix/ASN in the probes, let me know.
> 
> --
> Pedro
> 
> 
> 2018-05-07 12:51 GMT+02:00 Luca Deri >:
> >
> > Pedro,
> > the file specified with -A has to be in GeoIP format, not text as you did
> >
> > Luca
> >
> > On 4 May 2018, at 18:20, PEDRO RODRIGUES TORRES  > > wrote:
> >
> > Hello,
> >
> > I am using nProbe Pro v.8.5.180504 ($Revision: 6149 $) for
> > x86_64-pc-linux-gnu with native PF_RING acceleration.
> >
> > I am trying to use -A option with a data file like this:
> > $ head -n 5 ASList.dat
> > 2116:212.89.60.0/24 
> > 2116:212.89.59.0/24 
> > 2116:212.89.58.0/24 
> > 2116:212.89.57.0/24 
> > 2116:212.89.56.0/24 
> >
> > The command line used to start nProbe is:
> > nprobe -V9 --pcap-file-list myfilelist.txt -A ASList.dat
> >
> > I got this output:
> > ...
> > 04/May/2018 13:00:58 [util.c:465] GeoIP: loaded AS config file ASList.dat
> > 04/May/2018 13:00:58 [util.c:479] WARNING: Unable to load AS IPv6 file
> > ASListv6.dat. AS IPv6 support disabled
> > ...
> > 04/May/2018 13:00:58 [nprobe.c:8925] nProbe started successfully
> >
> >
> > The problem is that the exported dump is not being modified to include
> > srcas, dstas, srcmsk, dstmsk.
> > (the mask is the most important for me). I double checked it in my
> > local collector (nfdump).
> > A strange thing happen when I stop the nProbe with ctrl-c. I lot of
> > messages like this are printed:
> >
> > Invalid database type GeoIP Country Edition, expected GeoIP Organization 
> > Edition
> >
> > Yes, I could try to use the BGP Plugin, but currently I do not have a
> > easy BGP full routing router. :(
> >
> > I appreciate any help,
> > Pedro
> >
> > --
> > PEDRO RODRIGUES TORRES
> > Universidad Carlos III de Madrid
> > ___
> > Ntop-misc mailing list
> > Ntop-misc@listgateway.unipi.it 
> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc 
> > 
> >
> >
> >
> > ___
> > Ntop-misc mailing list
> > Ntop-misc@listgateway.unipi.it 
> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc 
> > 
> 
> 
> 
> 
> --
> PEDRO RODRIGUES TORRES
> Universidad Carlos III de Madrid
> ___
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

___
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Re: [Ntop-misc] nProbe -A option

2018-05-07 Thread Luca Deri 
Pedro,
the file specified with -A has to be in GeoIP format, not text as you did

Luca

> On 4 May 2018, at 18:20, PEDRO RODRIGUES TORRES  wrote:
> 
> Hello,
> 
> I am using nProbe Pro v.8.5.180504 ($Revision: 6149 $) for
> x86_64-pc-linux-gnu with native PF_RING acceleration.
> 
> I am trying to use -A option with a data file like this:
> $ head -n 5 ASList.dat
> 2116:212.89.60.0/24 
> 2116:212.89.59.0/24 
> 2116:212.89.58.0/24 
> 2116:212.89.57.0/24 
> 2116:212.89.56.0/24 
> 
> The command line used to start nProbe is:
> nprobe -V9 --pcap-file-list myfilelist.txt -A ASList.dat
> 
> I got this output:
> ...
> 04/May/2018 13:00:58 [util.c:465] GeoIP: loaded AS config file ASList.dat
> 04/May/2018 13:00:58 [util.c:479] WARNING: Unable to load AS IPv6 file
> ASListv6.dat. AS IPv6 support disabled
> ...
> 04/May/2018 13:00:58 [nprobe.c:8925] nProbe started successfully
> 
> 
> The problem is that the exported dump is not being modified to include
> srcas, dstas, srcmsk, dstmsk.
> (the mask is the most important for me). I double checked it in my
> local collector (nfdump).
> A strange thing happen when I stop the nProbe with ctrl-c. I lot of
> messages like this are printed:
> 
> Invalid database type GeoIP Country Edition, expected GeoIP Organization 
> Edition
> 
> Yes, I could try to use the BGP Plugin, but currently I do not have a
> easy BGP full routing router. :(
> 
> I appreciate any help,
> Pedro
> 
> -- 
> PEDRO RODRIGUES TORRES
> Universidad Carlos III de Madrid
> ___
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

___
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

[Ntop-misc] nProbe -A option

2018-05-04 Thread PEDRO RODRIGUES TORRES 
Hello,

I am using nProbe Pro v.8.5.180504 ($Revision: 6149 $) for
x86_64-pc-linux-gnu with native PF_RING acceleration.

I am trying to use -A option with a data file like this:
$ head -n 5 ASList.dat
2116:212.89.60.0/24
2116:212.89.59.0/24
2116:212.89.58.0/24
2116:212.89.57.0/24
2116:212.89.56.0/24

The command line used to start nProbe is:
nprobe -V9 --pcap-file-list myfilelist.txt -A ASList.dat

I got this output:
...
04/May/2018 13:00:58 [util.c:465] GeoIP: loaded AS config file ASList.dat
04/May/2018 13:00:58 [util.c:479] WARNING: Unable to load AS IPv6 file
ASListv6.dat. AS IPv6 support disabled
...
04/May/2018 13:00:58 [nprobe.c:8925] nProbe started successfully


The problem is that the exported dump is not being modified to include
srcas, dstas, srcmsk, dstmsk.
(the mask is the most important for me). I double checked it in my
local collector (nfdump).
A strange thing happen when I stop the nProbe with ctrl-c. I lot of
messages like this are printed:

Invalid database type GeoIP Country Edition, expected GeoIP Organization
Edition

Yes, I could try to use the BGP Plugin, but currently I do not have a
easy BGP full routing router. :(

I appreciate any help,
Pedro

-- 
PEDRO RODRIGUES TORRES
Universidad Carlos III de Madrid
___
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc