Ntopng not showing country flags

LFC

I'm new to pfSense and have the same problem. No GeoIP location, no country flags, no proper ASN just 0. I did some research and just wanted to share my findings.
Using pfSense 2.4.4-RELEASE-p2 with Ntopng Community Edition v.3.6.181116

I manually ran the /usr/local/bin/geoipupdate.sh script and got :
fetch: http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz: Not Found

Then I went to Maxmind website and found this article:
https://dev.maxmind.com/release-note/discontinuation-notice-for-geolite-legacy-databases/

It looks for me that Maxmind has ended their support and download for the legacy GeoIP data.
The only GeoIP data you can download are the GeoLite2 data. Not sure if Ntopng is compatible with that.

Anyway, thanks for a great and free product! I hope the GeoIP feature will get fixed soon.

Cheers!

CJDeeZ

ouch..

Kornstalx

Was this issue ever resolved?

Networker2001

@kornstalx
Not resolved yet, but it looks like it may be comming based on the bug tracker:

"New ntopng 3.8 (December 2018) release supports the GeoIP2 library" https://redmine.pfsense.org/issues/9211

We are currently at ntopng 3.6, So once the new version gets ported to pfsense, we may see it resolved. Fingers crossed.

bldnightowl

+1 to pulling in the latest version of ntopng asap. please

xeeaxe

Hi, I have the same issue. Has anyone been able to find a solution? The map also isn't working, it only shows my own location.

Here is my version summary:
pfSense: 2.4.4_2
ntopng: 3.6.190215 - Community Edition
nDPI 2.4.0
cURL 7.64.0
Twitter Bootstrap 3.x
Font Awesome 4.x
RRDtool 1.7.0
Redis Server 4.0.10
Mongoose web server 3.7
LuaJIT LuaJIT 2.1.0-beta3
ØMQ 4.3.1
GeoLite 1.3.2
This product includes GeoLite data created by MaxMind.
Data-Driven Documents (d3js) 2.9.1 / 3.0

Kornstalx

What kills me about this is ntop and mapping is the whole reason I switched from Sonicwall. When I saw the latest gen NetGate devices were releasing I decided to switch, and grabbed one.

And now I'm completely burned.

rosenstand

@kornstalx this should be fixed in ntopng 3.8 which was released almost 3 months ago. We’ll just have to wait for Netgate to update the package.

I would love to look at it but I was having trouble finding the packages “source” repo last time I tried...

fnarq

Every IP that I try to geo-locate shows as being in Rome, Italy. I wish :)

randombits

Is this in the pipeline to be fixed ?

Kahlen

+1 "Geolocation error [Permission denied]." always geo-locate shows as being in Rome, Italy

JaLooNz

This post is deleted!

JaLooNz

Apparently ntopng 3.6 is already using the GeoLite2 database.
https://github.com/ntop/ntopng/blob/3.6-stable/src/Geolocation.cpp#L131

The data path for the files should be...
/usr/local/share/ntopng/httpdocs/geoip/GeoLite2-ASN.mmdb
/usr/local/share/ntopng/httpdocs/geoip/GeoLite2-City.mmdb

Which can be downloaded from...
https://geolite.maxmind.com/download/geoip/database/GeoLite2-City.tar.gz
https://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN.tar.gz

no_jah

I thought this issue was supposed to be fixed in the latest ntopng update, but still no country flags or host activity maps.

Camd1710

@JaLooNz muchas gracias funciono a la primera solo hay que colocar las bases de datos en la ruta especificada

Brutos

Any idea if this will every get fixed?

kiokoman

i have the same problem with pfsense 2.5.x and ntopng 0.8.13_3
it's still trying to download geoip from the wrong url

$fetchcmd = "/usr/bin/fetch";
        $geolite_city = "https://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz";
        $geolite_city_v6 = "https://geolite.maxmind.com/download/geoip/database/GeoLiteCityv6-beta/GeoLiteCityv6.dat.gz";
        $geoip_asnum = "https://download.maxmind.com/download/geoip/database/asnum/GeoIPASNum.dat.gz";
        $geoip_asnum_v6 = "https://download.maxmind.com/download/geoip/database/asnum/GeoIPASNumv6.dat.gz";

i have changed it inside /usr/local/pkg/ntopng.inc as suggested here -> https://redmine.pfsense.org/issues/9211 by Mark Vejvoda to

        $geolite_city = "https://centminmod.com/centminmodparts/geoip-legacy/GeoLiteCity.dat.gz";
        $geolite_city_v6 = "https://centminmod.com/centminmodparts/geoip-legacy/GeoLiteCityv6.dat.gz";
        $geoip_asnum = "https://centminmod.com/centminmodparts/geoip-legacy/GeoIPASNum.dat.gz";
        $geoip_asnum_v6 = "https://centminmod.com/centminmodparts/geoip-legacy/GeoIPASNumv6.dat.gz";