Skip to content

Latest commit

 

History

History
 
 

geoip

README.md

##GeoIP intermediate plugin ###Plugin description

This plugin fills informations about country codes of source and destination address into the data record's metadata structure.

###Geolocation

For geolocation, MaxMind GeoIP API and database is used.

###Configuration

Default plugin configuration in internalcfg.xml:

<intermediatePlugin>
    <name>geoip</name>
    <file>/usr/share/ipfixcol/plugins/ipfixcol-geoip-inter.so</file>
    <threadName>geoip</threadName>
</intermediatePlugin>

Or as ipfixconf output:

     Plugin type         Name/Format     Process/Thread         File        
 ----------------------------------------------------------------------------
     intermediate          geoip          geoip        /usr/share/ipfixcol/plugins/ipfixcol-geoip-inter.so

Example startup.xml configuration:

<geoip>
	<path>/path/to/GeoIP.dat</path>
	<path6>/path/to/GeoIPv6.dat</path6>
</geoip>
  • path (optional) is a path to IPv4 database file. By default, file from installed GeoIP package is used.
  • path6 (optional) is a path to IPv6 database file. By default, GeoIPv6.dat distributed with plugin is used.

Back to Top