Problem with the Wold Map

[UnveilTech]

Problem with the Wold Map

[allinurl]

Thanks for sharing that. Are you able to see the map at: https://rt.goaccess.io ? If so, it might be an issue specific to your log, possibly related to the log format. Could you share a portion of your access log and the log/date/time-format that you are using so I can try to replicate the issue on my end? Feel free to send it via hello [ a t ] goaccess.io.

[UnveilTech]

Hi allinurl,

screen shot of the World Map area:

sample of the log:
{"date":1716974671,"hits":1,"signatureid":2029340,"signature":"INFO TLS Handshake Failure","category":"Potentially Bad Traffic","severity":2,"srcip":3274700552,"dstip":3232236550,"srcport":443,"dstport":47788,"app":"tls","proto":"TCP","toserver":723,"toclient":213,"host":"one.one","ja3":"68485c296b23ddbea8137b9d37c1422c","ja3s":null,"srciptxt":"195.47.247.8","dstiptxt":"192.168.4.6"}

format:
'%^{"date":%x,"hits":%^,"signatureid":"%^","signature":"%^","category":"%^","severity":%^,"srcip":%^,"dstip":%^,"srcport":%^,"dstport":%^,"app":%^,"proto":"%^","toserver":%^,"toclient":%^,"host":"%r","ja3":"%^","ja3s":"%^","srciptxt":"%h","dstiptxt":"%^"}'

geo-location seems ok as we can see country names and ASNs.
Bar and Spline are ok

thanks

[UnveilTech]

additional info:
GoAccess - 1.9.2.
For more details visit: https://goaccess.io/
Copyright (C) 2009-2024 by Gerardo Orellana

Build configure arguments:
--enable-utf8
--enable-geoip=mmdb

[UnveilTech]

more info:
many IPs are private in the log, some are public, could it be the issue ?

[allinurl]

Were you able to access https://rt.goaccess.io/ and see the map there? It shouldn't be a problem, I deal with a lot of logs but if you prefer, feel free to replace those IPs, e.g., 192.168.0.1.

[UnveilTech]

yes we can see that so nice map on your page ;o)
ok, we try to ignore the private IPs...

keep you posted...

[UnveilTech]

we've modified the format to take care the Dst IP.

here is with the Bar view:

here is with the Map view:

and still the same error on the browser.

[allinurl]

I meant if you could send it my way to my email or attach it here so I can try to replicate the issue. Also, please post the log-format, date-format and time-format and any other config settings you are passing/using.

[UnveilTech]

data sent to your email...

[UnveilTech]

Gerardo,
please close the case, we found the issue.
it was due to the fact we were not using the flag '%b' in the format.
it seems the Wold Map does not work fine if no "TX. Amount".

anyway thanks for your support, appreciated.
have a sexy day.

[UnveilTech]

we now have the Map: