[Bro] issue with geoip lookups

Nicholas Weaver nweaver at ICSI.Berkeley.EDU
Fri Oct 5 07:21:21 PDT 2007


Oh, wait.  Yeah.  Let me look into this a little more...



On Fri, Oct 05, 2007 at 07:20:48AM -0700, Nicholas Weaver composed:
> On Fri, Oct 05, 2007 at 07:19:00AM -0700, Vern Paxson composed:
> > > This is just simply a print order, (City, region, country) rather than
> > > (country, region, city), I believe.
> > 
> > I believe he's referring to 64.236.22.63 instead returning information
> > for 63.22.236.64 - which looks a lot like a missing ntohl().
> 
> Ah, yeah.  (Didn't notice that).
> 
> What is the function you are using to print the IP?
> 
> -- 
> Nicholas C. Weaver                               nweaver at icsi.berkeley.edu
>      This message has been ROT-13 encrypted twice for higher security.

-- 
Nicholas C. Weaver                               nweaver at icsi.berkeley.edu
     This message has been ROT-13 encrypted twice for higher security.



More information about the Bro mailing list