[Bro-Dev] #536: protocols/ssh and geoip problems

[Bro Tracker]

#536: protocols/ssh and geoip problems
---------------------+------------------------
 Reporter:  gregor   |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:  Bro1.6
Component:  Bro      |    Version:  git/master
 Keywords:           |
---------------------+------------------------
 I got the following problems when running the ssh analyzer protocols/ssh
 on a FreeBSD. Geo-IP installed via ports and is:
 {{{
 pkg-info | grep GeoIP
 GeoIP-1.4.7         Find the country that any IP address or hostname
 originates
 }}}

 Here are the error messages (on stderr)
 {{{
 Error Opening file /usr/local/share/GeoIP/GeoIPCity.dat
 1312300855.632467 error in /home/gregor/projects/bro-
 master/policy/protocols/ssh/base.bro, line 123: can't initialize GeoIP
 City database.. trying Country version (lookup_location(SSH::c$id$orig_h))
 Invalid database type GeoIP Country Edition, expected GeoIP City Edition,
 Rev 1
 Invalid database type GeoIP Country Edition, expected GeoIP City Edition,
 Rev 1
 Invalid database type GeoIP Country Edition, expected GeoIP City Edition,
 Rev 1
 [last line repeated many times]
 }}}

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/536>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker