els0r / goProbe

High-performance IP packet metadata aggregation and efficient storage and querying of flows
GNU General Public License v2.0
12 stars 4 forks source link

Plugin: GeoIP lookup / enhancement #339

Open fako1024 opened 3 months ago

fako1024 commented 3 months ago

In order to be able to display traffic patterns on a map or other geospatial visualizations (see discussion e.g. here) a GeoIP plugin could be a nice extension (probably goes into https://github.com/els0r/goProbe-contrib). It would basically act similarly to the DNS resolver and augment the results table by additional columns containing resolved latitude / longitude wherever one or multiple IP columns are present (or a single column containing both latitude and longitude if that's easier / neater).

Note that it might be required that users provide their own GeoIP DB / file due to licensing issues.

DoD