Hello,
I applied successfully the tool at
github Customizing-Maxmind-IP-Geo-DB-for-Internal-Networks
https://github.com/threatstream/mhn/wiki/Customizing-Maxmind-IP-Geo-DB-for-Internal-Networks]
to add own IPs for an important Enterprise Security Projekt.
But somehow the mmdb created by
python csv2dat.py -w mmcity.dat mmcity GeoLiteCity-and-mynetworks.csv
differs from Splunks internal GeoLite2-City.mmdb
>>> import pygeoip, json>>> geo = pygeoip.GeoIP('GeoLite2-City.mmdb')>>> print json.dumps(geo.record_by_addr('182.236.164.11'), indent=4, sort_keys=True)
Traceback (most recent call last):
File "", line 1, in
File "/root/mmutils/env/lib/python2.7/site-packages/pygeoip/__init__.py", line 544, in record_by_addr
raise GeoIPError(message)
pygeoip.GeoIPError: Invalid database type, expected City
Is there a better method? Did I miss another conversion step?
Thanks!
[1]: https://github.com/threatstream/mhn/wiki/Customizing-Maxmind-IP-Geo-DB-for-Internal-Networks
↧