Giters

danielpoliakov / lisa

Sandbox for automated Linux malware analysis.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

MaxMind GeoLite databases links can't be accessiable

nghiango1 opened this issue · comments

commented

Hi,

So when I try to install Lisa, the docker build in service 'worker' contain these wget links

    && echo "Downloading MaxMind GeoLite databases ..." \
    && wget https://geolite.maxmind.com/download/geoip/database/GeoLite2-City.tar.gz -q -O - | tar xz -C data/geolite2databases \
    && wget https://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN.tar.gz -q -O - | tar xz -C data/geolite2databases \

which are now not accessible anymore and require a registered account to download in MaxMind new policy. This needs a little bit of fix and things will work just smooth as before.

commented

Just need to add an argument 'YOUR_LICENSE_KEY' in worker's dockerfile

# Database URL
https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-ASN&license_key=YOUR_LICENSE_KEY&suffix=tar.gz
commented

Hi, thanks for mentioning MaxMind policy. API key is now configurable in docker-compose.yml - commit. If no API key is provided, network analysis will just ommit quering geo info.