I'm using the GeoIP lookup functionality in 1.3 and everything looks to be working fine, except that all the addresses are getting looked up "backwards". For example, if Bro looks up the address <a href="http://64.236.22.63">
64.236.22.63</a>, I will get a log entry<br><br>Connection to: <a href="http://64.236.22.63">64.236.22.63</a> (Westford, MA, US)<br><br>which does not match with the output of a manual lookup with geoiplookup.<br><br>However if I run
<a href="http://63.22.236.64">63.22.236.64</a> through geoiplookup, I get<br><br>GeoIP City Edition, Rev 0: US, MA, Westford<br><br>I have confirmed this with several different IPs. I'm running Bro 1.3.2 on FreeBSD 6.2
with the ports install of GeoIP 1.4.3. Any suggestions?<br><br>Thanks,<br>Stephen<br>