Problem with the Wold Map

UnveilTech commented 4 months ago

hello, Goaccess 1.9.2 here are 2 errors with the World Map, tried with Firefox and Chrome, both latest builds.

downloadable font: Glyph bbox was incorrect (glyph ids 19 32 33 34 37 38 42 44 45 46 52 53 78 79 81 95 96 101 104) (font-family: "fa" style:normal weight:400 stretch:100 src index:0) source: data:application/font-woff;charset=utf-8;base64,d09GRgABAAAAAFxQAAsAAAAAXAQAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABPUy8yAAABCAAAAGAAAABg … SWNvTW9vbi4ARgBvAG4AdAAgAGcAZQBuAGUAcgBhAHQAZQBkACAAYgB5ACAASQBjAG8ATQBvAG8AbgAuAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

http://192.168.4.3:81/goaccess.html:1 any ideas ? have a sexy day

allinurl commented 4 months ago

Thanks for sharing that. Are you able to see the map at: https://rt.goaccess.io ? If so, it might be an issue specific to your log, possibly related to the log format. Could you share a portion of your access log and the log/date/time-format that you are using so I can try to replicate the issue on my end? Feel free to send it via hello [ a t ] goaccess.io.

UnveilTech commented 4 months ago

Hi allinurl,

screen shot of the World Map area:

sample of the log: {"date":1716974671,"hits":1,"signatureid":2029340,"signature":"INFO TLS Handshake Failure","category":"Potentially Bad Traffic","severity":2,"srcip":3274700552,"dstip":3232236550,"srcport":443,"dstport":47788,"app":"tls","proto":"TCP","toserver":723,"toclient":213,"host":"one.one","ja3":"68485c296b23ddbea8137b9d37c1422c","ja3s":null,"srciptxt":"195.47.247.8","dstiptxt":"192.168.4.6"}

format: '%^{"date":%x,"hits":%^,"signatureid":"%^","signature":"%^","category":"%^","severity":%^,"srcip":%^,"dstip":%^,"srcport":%^,"dstport":%^,"app":%^,"proto":"%^","toserver":%^,"toclient":%^,"host":"%r","ja3":"%^","ja3s":"%^","srciptxt":"%h","dstiptxt":"%^"}'

geo-location seems ok as we can see country names and ASNs. Bar and Spline are ok

thanks

UnveilTech commented 4 months ago

Build configure arguments: --enable-utf8 --enable-geoip=mmdb

UnveilTech commented 4 months ago

more info: many IPs are private in the log, some are public, could it be the issue ?

allinurl commented 4 months ago

Were you able to access https://rt.goaccess.io/ and see the map there? It shouldn't be a problem, I deal with a lot of logs but if you prefer, feel free to replace those IPs, e.g., 192.168.0.1.

UnveilTech commented 4 months ago

yes we can see that so nice map on your page ;o) ok, we try to ignore the private IPs...

keep you posted...

UnveilTech commented 4 months ago

we've modified the format to take care the Dst IP.

here is with the Bar view:

here is with the Map view:

and still the same error on the browser.

allinurl commented 4 months ago

I meant if you could send it my way to my email or attach it here so I can try to replicate the issue. Also, please post the log-format, date-format and time-format and any other config settings you are passing/using.

UnveilTech commented 4 months ago

data sent to your email...

UnveilTech commented 4 months ago

Gerardo, please close the case, we found the issue. it was due to the fact we were not using the flag '%b' in the format. it seems the Wold Map does not work fine if no "TX. Amount".

anyway thanks for your support, appreciated. have a sexy day.

UnveilTech commented 4 months ago

we now have the Map:

allinurl / goaccess

Problem with the Wold Map #2684