Hello Luca, The -A option is able to change only src/dst ASN, right? Even if a create a custom MMDB may I change de src/dst mask?
-- Pedro 2018-05-07 15:42 GMT+02:00 Luca Deri <[email protected]>: > Pedro > yes we moved to geoid in recent versions. Please see > https://blog.maxmind.com/2015/09/29/building-your-own- > mmdb-database-for-fun-and-profit/ that explains you how to create your > custom dat files > > Lyca > > > On 7 May 2018, at 14:06, PEDRO RODRIGUES TORRES <[email protected]> > wrote: > > Hello Luca, > > Possibly I read an old user guide: > https://www.ntop.org/wp-content/uploads/2013/03/nProbe_UserGuide.pdf > > I think the problem to use de BGP Plugin in my scenery is due I need to > process pcap files. I am not sure if the full BGP table will be loaded in > nProbe prior to process the pcap files. > Other problem is that bgp_probe_client.pl is not working for me... I need > to debug it but if has some easy way to insert prefix/ASN in the probes, > let me know. > > -- > Pedro > > > 2018-05-07 12:51 GMT+02:00 Luca Deri <[email protected]>: > > > > Pedro, > > the file specified with -A has to be in GeoIP format, not text as you did > > > > Luca > > > > On 4 May 2018, at 18:20, PEDRO RODRIGUES TORRES <[email protected]> > wrote: > > > > Hello, > > > > I am using nProbe Pro v.8.5.180504 ($Revision: 6149 $) for > > x86_64-pc-linux-gnu with native PF_RING acceleration. > > > > I am trying to use -A option with a data file like this: > > $ head -n 5 ASList.dat > > 2116:212.89.60.0/24 > > 2116:212.89.59.0/24 > > 2116:212.89.58.0/24 > > 2116:212.89.57.0/24 > > 2116:212.89.56.0/24 > > > > The command line used to start nProbe is: > > nprobe -V9 --pcap-file-list myfilelist.txt -A ASList.dat > > > > I got this output: > > ... > > 04/May/2018 13:00:58 [util.c:465] GeoIP: loaded AS config file ASList.dat > > 04/May/2018 13:00:58 [util.c:479] WARNING: Unable to load AS IPv6 file > > ASListv6.dat. AS IPv6 support disabled > > ... > > 04/May/2018 13:00:58 [nprobe.c:8925] nProbe started successfully > > > > > > The problem is that the exported dump is not being modified to include > > srcas, dstas, srcmsk, dstmsk. > > (the mask is the most important for me). I double checked it in my > > local collector (nfdump). > > A strange thing happen when I stop the nProbe with ctrl-c. I lot of > > messages like this are printed: > > > > Invalid database type GeoIP Country Edition, expected GeoIP Organization > Edition > > > > Yes, I could try to use the BGP Plugin, but currently I do not have a > > easy BGP full routing router. :( > > > > I appreciate any help, > > Pedro > > > > -- > > PEDRO RODRIGUES TORRES > > Universidad Carlos III de Madrid > > _______________________________________________ > > Ntop-misc mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > > > > > > _______________________________________________ > > Ntop-misc mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > > > -- > PEDRO RODRIGUES TORRES > Universidad Carlos III de Madrid > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > -- PEDRO RODRIGUES TORRES Universidad Carlos III de Madrid
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
