View unanswered posts | View active topics It is currently Tue Aug 20, 2019 1:24 am



Post new topic Reply to topic  [ 19 posts ]  Go to page 1, 2  Next
 Error Opening file GeoLiteCity.dat 
Author Message

Joined: Thu Jun 10, 2010 12:27 pm
Posts: 2
Reply with quote
Post Error Opening file GeoLiteCity.dat
Hi,

I'm sorry I don't speak English. I am Spanish.
May Problem is: Error Opening file GeoLiteCity.dat

When upload a pcap and xplico decoding file get me this error: Error Opening file GeoLiteCity.dat



Best Regard,


Thu Jun 10, 2010 12:38 pm
Profile

Joined: Wed Sep 16, 2009 10:45 pm
Posts: 128
Reply with quote
Post Re: Error Opening file GeoLiteCity.dat
Hello Teo,

are you running the binary as root? And, if you installed Xplico running the instructions of the Wiki, have you installed succesfully the GeoIP plugin? (first part of the tutorial).

Regards,
Carlos.


Thu Jun 10, 2010 1:35 pm
Profile

Joined: Thu Jun 10, 2010 12:27 pm
Posts: 2
Reply with quote
Post Re: Error Opening file GeoLiteCity.dat
Hello Carlos,

Thank you. Following your instructions, the problem is resolved. ;)

Best Regard,


Fri Jun 11, 2010 11:10 am
Profile

Joined: Thu May 20, 2010 11:29 pm
Posts: 28
Reply with quote
Post Re: Error Opening file GeoLiteCity.dat
Hello,

I've just installed xplico 0.6.0 on a fresh ubuntu 10.10 box, and I'm getting this error.
I followed the tutorial as it is on the site. Compiled GeoIP-1.4.6 and then xplico. No problem with compile.

Started splico with rc.d service ( sudo service xplico start ).

Here it is in memory:
Code:
root     14688  0.0  0.0   7440  3364 ?        S<s  11:00   0:00 ./dema -d /opt/xplico -b sqlite


My compilation is as follows:

Code:
drwxr-xr-x  8 sisra sisra 4096 2010-10-18 04:59 GeoIP-1.4.6
drwxr-xr-x 17 sisra sisra 4096 2010-09-17 17:36 ghostpdl-9.00
drwx------  7 sisra sisra 4096 2010-10-18 05:33 videosnarf-0.63
drwxr-xr-x 15 sisra sisra 4096 2010-10-18 10:49 xplico-0.6.0


After some seconds of starting xplico, I get five erros in /etc/log/messages:

Code:
Error Opening file GeoLiteCity.dat
Error Opening file GeoLiteCity.dat
Error Opening file GeoLiteCity.dat
Error Opening file GeoLiteCity.dat
Error Opening file GeoLiteCity.dat


Any help ?


Mon Oct 18, 2010 4:11 pm
Profile
Site Admin

Joined: Wed Sep 16, 2009 10:09 pm
Posts: 394
Reply with quote
Post Re: Error Opening file GeoLiteCity.dat
Hi,
have you downloaded GeoLiteCity.dat.gz ?


Tue Oct 19, 2010 6:05 pm
Profile WWW

Joined: Thu May 20, 2010 11:29 pm
Posts: 28
Reply with quote
Post Re: Error Opening file GeoLiteCity.dat
Yes, gianluca, I downloaded, unpacked it and is is at /opt/xplico, installed there by the command make install. Everyone can read it. Here is the directory listing:

Code:
drwxrwxrwx 8 www-data root         4096 2010-10-19 14:41 .
drwxr-xr-x 4 root     root         4096 2010-10-18 10:54 ..
drwxr-xr-x 3 www-data root         4096 2010-10-19 08:27 bin
drwxr-xr-x 2 www-data root         4096 2010-10-18 10:53 cfg
-rw-r--r-- 1 www-data sisra    30751818 2010-10-18 05:05 GeoLiteCity.dat
drwxr-xr-x 2 www-data root         4096 2010-10-18 10:53 log
drwxr-xr-x 5 www-data www-data     4096 2010-10-18 11:01 pol_1
drwxr-xr-x 3 www-data root         4096 2010-10-18 10:53 script
drwxr-xr-x 5 www-data sisra        4096 2009-09-09 01:23 xi
-rw-rw-rw- 1 www-data root     55020544 2010-10-19 14:41 xplico.db
-rw-r--r-- 1 root     root         2576 2010-10-19 14:41 xplico.db-journal


Tue Oct 19, 2010 7:45 pm
Profile
Site Admin

Joined: Wed Sep 16, 2009 10:09 pm
Posts: 394
Reply with quote
Post Re: Error Opening file GeoLiteCity.dat
The errors:
Code:
Error Opening file GeoLiteCity.dat                                                           
Error Opening file GeoLiteCity.dat                                                           
Error Opening file GeoLiteCity.dat                                                           
Error Opening file GeoLiteCity.dat                                                           
Error Opening file GeoLiteCity.dat

are correct, it is a GeoIP library warning. Xplico looks the GeoLiteCity.dat in many places, in some of that places there is not the library, then in this case there is the error. When Xplico can not find the GeoLiteCity.dat DB you can see this error:
Code:
Download GeoLiteCity.dat from http://geolite.maxmind.com/download/geoip/database/ and gunzip it into /opt/xplico/

There are many errors log because all Xplico manipulators can use the GeoLiteCity.dat DB.

Ciao.
Gianluca


Wed Oct 20, 2010 5:34 am
Profile WWW

Joined: Thu May 20, 2010 11:29 pm
Posts: 28
Reply with quote
Post Re: Error Opening file GeoLiteCity.dat
But when I enter the GeoMap page nothing is shown. Only the xplico page with the header : pcap file - Geomap file
Shouln't it have something listed ?


Wed Oct 20, 2010 8:43 am
Profile
Site Admin

Joined: Wed Sep 16, 2009 10:09 pm
Posts: 394
Reply with quote
Post Re: Error Opening file GeoLiteCity.dat
Well, we now try to understand and isolate the problem.
First do a test from CLI:
Code:
/opt/xplico/bin/xplico -m pcap -f file.pcap

After processing, you should find the file:
Code:
xdecode/geomap_128*

if you can open this file with Google Earth, then the problem is somewhere else, probably in the Dema/XI.


Wed Oct 20, 2010 6:42 pm
Profile WWW

Joined: Thu May 20, 2010 11:29 pm
Posts: 28
Reply with quote
Post Re: Error Opening file GeoLiteCity.dat
Wel,

I tried to run the command and got:
Code:
/tmp$ sudo /opt/xplico/bin/xplico -m pcap -f file.pcap
xplico v0.6.0
Internet Traffic Decoder (NFAT).
See http://www.xplico.org for more information.

Copyright 2007-2010 Gianluca Costa & Andrea de Franceschi and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

This product includes GeoLite data created by MaxMind, available from http://www.maxmind.com/.
Configuration file (/opt/xplico/cfg/xplico_cli.cfg) found!
Error Opening file GeoLiteCity.dat
Error Opening file GeoLiteCity.dat
Error Opening file GeoLiteCity.dat
Error Opening file GeoLiteCity.dat
GeoLiteCity.dat found!

usage: xplico_bin [-v] [-c <config_file>] [-h] [-g] [-l] [-i <prot>] -m pcap -f <file> | -d <file_dir_path>
        -v version
        -c config file
        -h this help
        -i info of protocol 'prot'
        -g display graph-tree of protocols
        -l print all log in the screen
        -m capture type module
        ----- module params -----
        -f pcap or snoop file name
        -d pcap or snoop files dir path
        NOTE: parameters MUST respect this order!


So, the file is being searched and is finally found.

It does not process any pcap file. Just print this message.


Thu Oct 21, 2010 11:14 am
Profile
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 19 posts ]  Go to page 1, 2  Next


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by Vjacheslav Trushkin for Free Forums/DivisionCore.