Ntopng not showing country flags

Networker2001

@kornstalx
Not resolved yet, but it looks like it may be comming based on the bug tracker:

"New ntopng 3.8 (December 2018) release supports the GeoIP2 library" https://redmine.pfsense.org/issues/9211

We are currently at ntopng 3.6, So once the new version gets ported to pfsense, we may see it resolved. Fingers crossed.

bldnightowl

+1 to pulling in the latest version of ntopng asap. please

xeeaxe

Hi, I have the same issue. Has anyone been able to find a solution? The map also isn't working, it only shows my own location.

Here is my version summary:
pfSense: 2.4.4_2
ntopng: 3.6.190215 - Community Edition
nDPI 2.4.0
cURL 7.64.0
Twitter Bootstrap 3.x
Font Awesome 4.x
RRDtool 1.7.0
Redis Server 4.0.10
Mongoose web server 3.7
LuaJIT LuaJIT 2.1.0-beta3
ØMQ 4.3.1
GeoLite 1.3.2
This product includes GeoLite data created by MaxMind.
Data-Driven Documents (d3js) 2.9.1 / 3.0

Kornstalx

What kills me about this is ntop and mapping is the whole reason I switched from Sonicwall. When I saw the latest gen NetGate devices were releasing I decided to switch, and grabbed one.

And now I'm completely burned.

rosenstand

@kornstalx this should be fixed in ntopng 3.8 which was released almost 3 months ago. We’ll just have to wait for Netgate to update the package.

I would love to look at it but I was having trouble finding the packages “source” repo last time I tried...

fnarq

Every IP that I try to geo-locate shows as being in Rome, Italy. I wish :)

randombits

Is this in the pipeline to be fixed ?

Kahlen

+1 "Geolocation error [Permission denied]." always geo-locate shows as being in Rome, Italy

JaLooNz

This post is deleted!

JaLooNz

Apparently ntopng 3.6 is already using the GeoLite2 database.
https://github.com/ntop/ntopng/blob/3.6-stable/src/Geolocation.cpp#L131

The data path for the files should be...
/usr/local/share/ntopng/httpdocs/geoip/GeoLite2-ASN.mmdb
/usr/local/share/ntopng/httpdocs/geoip/GeoLite2-City.mmdb

Which can be downloaded from...
https://geolite.maxmind.com/download/geoip/database/GeoLite2-City.tar.gz
https://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN.tar.gz

no_jah

I thought this issue was supposed to be fixed in the latest ntopng update, but still no country flags or host activity maps.

Camd1710

@JaLooNz muchas gracias funciono a la primera solo hay que colocar las bases de datos en la ruta especificada

Brutos

Any idea if this will every get fixed?

kiokoman

i have the same problem with pfsense 2.5.x and ntopng 0.8.13_3
it's still trying to download geoip from the wrong url

$fetchcmd = "/usr/bin/fetch";
        $geolite_city = "https://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz";
        $geolite_city_v6 = "https://geolite.maxmind.com/download/geoip/database/GeoLiteCityv6-beta/GeoLiteCityv6.dat.gz";
        $geoip_asnum = "https://download.maxmind.com/download/geoip/database/asnum/GeoIPASNum.dat.gz";
        $geoip_asnum_v6 = "https://download.maxmind.com/download/geoip/database/asnum/GeoIPASNumv6.dat.gz";

i have changed it inside /usr/local/pkg/ntopng.inc as suggested here -> https://redmine.pfsense.org/issues/9211 by Mark Vejvoda to

        $geolite_city = "https://centminmod.com/centminmodparts/geoip-legacy/GeoLiteCity.dat.gz";
        $geolite_city_v6 = "https://centminmod.com/centminmodparts/geoip-legacy/GeoLiteCityv6.dat.gz";
        $geoip_asnum = "https://centminmod.com/centminmodparts/geoip-legacy/GeoIPASNum.dat.gz";
        $geoip_asnum_v6 = "https://centminmod.com/centminmodparts/geoip-legacy/GeoIPASNumv6.dat.gz";