Hello,
I am using nProbe Pro v.8.5.180504 ($Revision: 6149 $) for
x86_64-pc-linux-gnu with native PF_RING acceleration.
I am trying to use -A option with a data file like this:
$ head -n 5 ASList.dat
2116:212.89.60.0/24
2116:212.89.59.0/24
2116:212.89.58.0/24
2116:212.89.57.0/24
2116:212.89.56.0/24
The command line used to start nProbe is:
nprobe -V9 --pcap-file-list myfilelist.txt -A ASList.dat
I got this output:
...
04/May/2018 13:00:58 [util.c:465] GeoIP: loaded AS config file ASList.dat
04/May/2018 13:00:58 [util.c:479] WARNING: Unable to load AS IPv6 file
ASListv6.dat. AS IPv6 support disabled
...
04/May/2018 13:00:58 [nprobe.c:8925] nProbe started successfully
The problem is that the exported dump is not being modified to include
srcas, dstas, srcmsk, dstmsk.
(the mask is the most important for me). I double checked it in my
local collector (nfdump).
A strange thing happen when I stop the nProbe with ctrl-c. I lot of
messages like this are printed:
Invalid database type GeoIP Country Edition, expected GeoIP Organization
Edition
Yes, I could try to use the BGP Plugin, but currently I do not have a
easy BGP full routing router. :(
I appreciate any help,
Pedro
--
PEDRO RODRIGUES TORRES
Universidad Carlos III de Madrid
I am using nProbe Pro v.8.5.180504 ($Revision: 6149 $) for
x86_64-pc-linux-gnu with native PF_RING acceleration.
I am trying to use -A option with a data file like this:
$ head -n 5 ASList.dat
2116:212.89.60.0/24
2116:212.89.59.0/24
2116:212.89.58.0/24
2116:212.89.57.0/24
2116:212.89.56.0/24
The command line used to start nProbe is:
nprobe -V9 --pcap-file-list myfilelist.txt -A ASList.dat
I got this output:
...
04/May/2018 13:00:58 [util.c:465] GeoIP: loaded AS config file ASList.dat
04/May/2018 13:00:58 [util.c:479] WARNING: Unable to load AS IPv6 file
ASListv6.dat. AS IPv6 support disabled
...
04/May/2018 13:00:58 [nprobe.c:8925] nProbe started successfully
The problem is that the exported dump is not being modified to include
srcas, dstas, srcmsk, dstmsk.
(the mask is the most important for me). I double checked it in my
local collector (nfdump).
A strange thing happen when I stop the nProbe with ctrl-c. I lot of
messages like this are printed:
Invalid database type GeoIP Country Edition, expected GeoIP Organization
Edition
Yes, I could try to use the BGP Plugin, but currently I do not have a
easy BGP full routing router. :(
I appreciate any help,
Pedro
--
PEDRO RODRIGUES TORRES
Universidad Carlos III de Madrid