Next steps of IPFire Location

Next steps of IPFire Location

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1614 bytes --]

Hello,

Since there are now so many people involved in this project, I would like to send a little email to report what has happened and what the next steps are going to be…

I have spent (unfortunately) a lot of time to add the ability that we can “flatten the tree” when we export it. That means that no network will overlap with another one and we do not need to care about any orders of iptables rules being added.

That was quite a slow process in Python and since IPFire has to run on small hardware it needed to be ported into C. The tree can now be exported in about 10 seconds on my development box which is running an Intel Xeon E5-2630 processor.

I hope that we can reach acceptable times of only a few minutes on the slowest systems and way under a minute on an average system. To find out about that, I need you help:

I just pushed all changes into the next tree and would everyone who can to install that and report how long this command runs:

  mkdir tmp
  time location export --directory=tmp --format=xt_geoip

It would also be great if you could all check the output if this is still correct. I have done what I could, but I want to have an extra pair of eyes if possible.

If this works well, and no more regressions are being found, I will tag this release and we will close Core Update 153.

We will then roll out all recent changes that make the database better, but had to be held back because the tree needs to be flattened for most use-cases now. All older clients will then no longer receive an updated database any more.

Happy testing.

Best,
-Michael

Re: Next steps of IPFire Location

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 2231 bytes --]

I managed to export the database on my IPFire Mini Appliance in about one minute:

[root(a)fw01 libloc]# time location export --directory=tmp --format=xt_geoip

real    1m3.423s
user    1m1.470s
sys     0m1.009s

The system was under a little bit of load due to some network activity, but I am generally quite happy with this.

I added some more fine-tuning and could decrease the export time on my Debian test machine by another 40% to around six seconds.

-Michael

> On 18 Nov 2020, at 19:26, Michael Tremer <michael.tremer(a)ipfire.org> wrote:
> 
> Hello,
> 
> Since there are now so many people involved in this project, I would like to send a little email to report what has happened and what the next steps are going to be…
> 
> I have spent (unfortunately) a lot of time to add the ability that we can “flatten the tree” when we export it. That means that no network will overlap with another one and we do not need to care about any orders of iptables rules being added.
> 
> That was quite a slow process in Python and since IPFire has to run on small hardware it needed to be ported into C. The tree can now be exported in about 10 seconds on my development box which is running an Intel Xeon E5-2630 processor.
> 
> I hope that we can reach acceptable times of only a few minutes on the slowest systems and way under a minute on an average system. To find out about that, I need you help:
> 
> I just pushed all changes into the next tree and would everyone who can to install that and report how long this command runs:
> 
>  mkdir tmp
>  time location export --directory=tmp --format=xt_geoip
> 
> It would also be great if you could all check the output if this is still correct. I have done what I could, but I want to have an extra pair of eyes if possible.
> 
> If this works well, and no more regressions are being found, I will tag this release and we will close Core Update 153.
> 
> We will then roll out all recent changes that make the database better, but had to be held back because the tree needs to be flattened for most use-cases now. All older clients will then no longer receive an updated database any more.
> 
> Happy testing.
> 
> Best,
> -Michael

Re: Next steps of IPFire Location

[Peter Müller]

[-- Attachment #1: Type: text/plain, Size: 54381 bytes --]

Hello Michael, hello development folks, hello location folks,

first, as usual, I would like to thank you very much for working so hard on this. Frankly, I am not
sure if there is any shipper available to carry the amount of coffee/beer/... I owe you to the UK. :-)

After having installed Core 153 Development Build next/6cab8977, I am indeed able to confirm the export
command to run _much_ faster on my testing machine equipped with an Intel Celeron N3150:

> [root(a)maverick ~]# time location export --directory=tmp --format=xt_geoip
>
> real	0m29.247s
> user	0m28.366s
> sys	0m0.145s

I aborted the execution of the same command written in Python after about two hours, so this is definitely
sufficient even on dated hardware by now. Shout, rejoice (loosely translated from "jauchzet, frohlocket")! :-)

Judging by their file sizes, the list of generated xt_geoip files looks reasonable, since they are bigger
than their counterparts generated on a second machine running Core Update 152 (see below) on the same CPU
model and their chunk size matches common expectations such as the US' IPv4 file being rather big:

> [root(a)maverick tmp]# ls -lah
> total 13M
> drwxr-xr-x 2 root root  16K Nov 20 16:59 .
> drwxr-xr-x 6 root root 4.0K Nov 20 16:59 ..
> -rw-r--r-- 1 root root  12K Nov 20 16:59 A1.iv4
> -rw-r--r-- 1 root root 6.6K Nov 20 16:59 A1.iv6
> -rw-r--r-- 1 root root  12K Nov 20 16:59 A2.iv4
> -rw-r--r-- 1 root root 1.2K Nov 20 16:59 A2.iv6
> -rw-r--r-- 1 root root 2.7K Nov 20 16:59 A3.iv4
> -rw-r--r-- 1 root root 5.3K Nov 20 16:59 A3.iv6
> -rw-r--r-- 1 root root  424 Nov 20 16:59 AD.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 AD.iv6
> -rw-r--r-- 1 root root 6.5K Nov 20 16:59 AE.iv4
> -rw-r--r-- 1 root root 2.9K Nov 20 16:59 AE.iv6
> -rw-r--r-- 1 root root 4.2K Nov 20 16:59 AF.iv4
> -rw-r--r-- 1 root root  992 Nov 20 16:59 AF.iv6
> -rw-r--r-- 1 root root 2.5K Nov 20 16:59 AG.iv4
> -rw-r--r-- 1 root root  352 Nov 20 16:59 AG.iv6
> -rw-r--r-- 1 root root  200 Nov 20 16:59 AI.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 AI.iv6
> -rw-r--r-- 1 root root 5.4K Nov 20 16:59 AL.iv4
> -rw-r--r-- 1 root root 3.0K Nov 20 16:59 AL.iv6
> -rw-r--r-- 1 root root 4.1K Nov 20 16:59 AM.iv4
> -rw-r--r-- 1 root root 1.5K Nov 20 16:59 AM.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 AN.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 AN.iv6
> -rw-r--r-- 1 root root 2.4K Nov 20 16:59 AO.iv4
> -rw-r--r-- 1 root root  960 Nov 20 16:59 AO.iv6
> -rw-r--r-- 1 root root 7.9K Nov 20 16:59 AP.iv4
> -rw-r--r-- 1 root root 2.3K Nov 20 16:59 AP.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 AQ.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 AQ.iv6
> -rw-r--r-- 1 root root 102K Nov 20 16:59 AR.iv4
> -rw-r--r-- 1 root root  56K Nov 20 16:59 AR.iv6
> -rw-r--r-- 1 root root  152 Nov 20 16:59 AS.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 AS.iv6
> -rw-r--r-- 1 root root  27K Nov 20 16:59 AT.iv4
> -rw-r--r-- 1 root root  32K Nov 20 16:59 AT.iv6
> -rw-r--r-- 1 root root 189K Nov 20 16:59 AU.iv4
> -rw-r--r-- 1 root root  87K Nov 20 16:59 AU.iv6
> -rw-r--r-- 1 root root  960 Nov 20 16:59 AW.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 AW.iv6
> -rw-r--r-- 1 root root    8 Nov 20 16:59 AX.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 AX.iv6
> -rw-r--r-- 1 root root 6.7K Nov 20 16:59 AZ.iv4
> -rw-r--r-- 1 root root 2.2K Nov 20 16:59 AZ.iv6
> -rw-r--r-- 1 root root 5.1K Nov 20 16:59 BA.iv4
> -rw-r--r-- 1 root root 1.7K Nov 20 16:59 BA.iv6
> -rw-r--r-- 1 root root 3.5K Nov 20 16:59 BB.iv4
> -rw-r--r-- 1 root root  768 Nov 20 16:59 BB.iv6
> -rw-r--r-- 1 root root  52K Nov 20 16:59 BD.iv4
> -rw-r--r-- 1 root root  42K Nov 20 16:59 BD.iv6
> -rw-r--r-- 1 root root  18K Nov 20 16:59 BE.iv4
> -rw-r--r-- 1 root root  21K Nov 20 16:59 BE.iv6
> -rw-r--r-- 1 root root 1.8K Nov 20 16:59 BF.iv4
> -rw-r--r-- 1 root root  576 Nov 20 16:59 BF.iv6
> -rw-r--r-- 1 root root  58K Nov 20 16:59 BG.iv4
> -rw-r--r-- 1 root root  12K Nov 20 16:59 BG.iv6
> -rw-r--r-- 1 root root 4.9K Nov 20 16:59 BH.iv4
> -rw-r--r-- 1 root root  832 Nov 20 16:59 BH.iv6
> -rw-r--r-- 1 root root 1016 Nov 20 16:59 BI.iv4
> -rw-r--r-- 1 root root  256 Nov 20 16:59 BI.iv6
> -rw-r--r-- 1 root root 1.2K Nov 20 16:59 BJ.iv4
> -rw-r--r-- 1 root root  448 Nov 20 16:59 BJ.iv6
> -rw-r--r-- 1 root root   56 Nov 20 16:59 BL.iv4
> -rw-r--r-- 1 root root   96 Nov 20 16:59 BL.iv6
> -rw-r--r-- 1 root root 1.4K Nov 20 16:59 BM.iv4
> -rw-r--r-- 1 root root  224 Nov 20 16:59 BM.iv6
> -rw-r--r-- 1 root root 2.1K Nov 20 16:59 BN.iv4
> -rw-r--r-- 1 root root  320 Nov 20 16:59 BN.iv6
> -rw-r--r-- 1 root root 8.0K Nov 20 16:59 BO.iv4
> -rw-r--r-- 1 root root 2.6K Nov 20 16:59 BO.iv6
> -rw-r--r-- 1 root root  224 Nov 20 16:59 BQ.iv4
> -rw-r--r-- 1 root root  160 Nov 20 16:59 BQ.iv6
> -rw-r--r-- 1 root root 425K Nov 20 16:59 BR.iv4
> -rw-r--r-- 1 root root 553K Nov 20 16:59 BR.iv6
> -rw-r--r-- 1 root root  784 Nov 20 16:59 BS.iv4
> -rw-r--r-- 1 root root   96 Nov 20 16:59 BS.iv6
> -rw-r--r-- 1 root root  248 Nov 20 16:59 BT.iv4
> -rw-r--r-- 1 root root 1.3K Nov 20 16:59 BT.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 BV.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 BV.iv6
> -rw-r--r-- 1 root root 1.8K Nov 20 16:59 BW.iv4
> -rw-r--r-- 1 root root  544 Nov 20 16:59 BW.iv6
> -rw-r--r-- 1 root root 9.2K Nov 20 16:59 BY.iv4
> -rw-r--r-- 1 root root 4.0K Nov 20 16:59 BY.iv6
> -rw-r--r-- 1 root root 2.1K Nov 20 16:59 BZ.iv4
> -rw-r--r-- 1 root root 1.8K Nov 20 16:59 BZ.iv6
> -rw-r--r-- 1 root root 197K Nov 20 16:59 CA.iv4
> -rw-r--r-- 1 root root  54K Nov 20 16:59 CA.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 CC.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 CC.iv6
> -rw-r--r-- 1 root root 2.1K Nov 20 16:59 CD.iv4
> -rw-r--r-- 1 root root  576 Nov 20 16:59 CD.iv6
> -rw-r--r-- 1 root root  144 Nov 20 16:59 CF.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 CF.iv6
> -rw-r--r-- 1 root root  816 Nov 20 16:59 CG.iv4
> -rw-r--r-- 1 root root  864 Nov 20 16:59 CG.iv6
> -rw-r--r-- 1 root root  33K Nov 20 16:59 CH.iv4
> -rw-r--r-- 1 root root  45K Nov 20 16:59 CH.iv6
> -rw-r--r-- 1 root root 8.2K Nov 20 16:59 CI.iv4
> -rw-r--r-- 1 root root  640 Nov 20 16:59 CI.iv6
> -rw-r--r-- 1 root root  232 Nov 20 16:59 CK.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 CK.iv6
> -rw-r--r-- 1 root root  41K Nov 20 16:59 CL.iv4
> -rw-r--r-- 1 root root  20K Nov 20 16:59 CL.iv6
> -rw-r--r-- 1 root root 2.6K Nov 20 16:59 CM.iv4
> -rw-r--r-- 1 root root  800 Nov 20 16:59 CM.iv6
> -rw-r--r-- 1 root root 307K Nov 20 16:59 CN.iv4
> -rw-r--r-- 1 root root 260K Nov 20 16:59 CN.iv6
> -rw-r--r-- 1 root root  68K Nov 20 16:59 CO.iv4
> -rw-r--r-- 1 root root  25K Nov 20 16:59 CO.iv6
> -rw-r--r-- 1 root root  34K Nov 20 16:59 CR.iv4
> -rw-r--r-- 1 root root 5.9K Nov 20 16:59 CR.iv6
> -rw-r--r-- 1 root root  432 Nov 20 16:59 CU.iv4
> -rw-r--r-- 1 root root  192 Nov 20 16:59 CU.iv6
> -rw-r--r-- 1 root root  232 Nov 20 16:59 CV.iv4
> -rw-r--r-- 1 root root   96 Nov 20 16:59 CV.iv6
> -rw-r--r-- 1 root root 1.6K Nov 20 16:59 CW.iv4
> -rw-r--r-- 1 root root 1.0K Nov 20 16:59 CW.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 CX.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 CX.iv6
> -rw-r--r-- 1 root root 7.8K Nov 20 16:59 CY.iv4
> -rw-r--r-- 1 root root 2.0K Nov 20 16:59 CY.iv6
> -rw-r--r-- 1 root root  28K Nov 20 16:59 CZ.iv4
> -rw-r--r-- 1 root root  28K Nov 20 16:59 CZ.iv6
> -rw-r--r-- 1 root root 153K Nov 20 16:59 DE.iv4
> -rw-r--r-- 1 root root 157K Nov 20 16:59 DE.iv6
> -rw-r--r-- 1 root root  752 Nov 20 16:59 DJ.iv4
> -rw-r--r-- 1 root root  192 Nov 20 16:59 DJ.iv6
> -rw-r--r-- 1 root root  17K Nov 20 16:59 DK.iv4
> -rw-r--r-- 1 root root  14K Nov 20 16:59 DK.iv6
> -rw-r--r-- 1 root root  152 Nov 20 16:59 DM.iv4
> -rw-r--r-- 1 root root   96 Nov 20 16:59 DM.iv6
> -rw-r--r-- 1 root root 7.3K Nov 20 16:59 DO.iv4
> -rw-r--r-- 1 root root 3.0K Nov 20 16:59 DO.iv6
> -rw-r--r-- 1 root root 3.3K Nov 20 16:59 DZ.iv4
> -rw-r--r-- 1 root root  576 Nov 20 16:59 DZ.iv6
> -rw-r--r-- 1 root root  27K Nov 20 16:59 EC.iv4
> -rw-r--r-- 1 root root  26K Nov 20 16:59 EC.iv6
> -rw-r--r-- 1 root root 6.4K Nov 20 16:59 EE.iv4
> -rw-r--r-- 1 root root 6.0K Nov 20 16:59 EE.iv6
> -rw-r--r-- 1 root root  49K Nov 20 16:59 EG.iv4
> -rw-r--r-- 1 root root  13K Nov 20 16:59 EG.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 EH.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 EH.iv6
> -rw-r--r-- 1 root root  120 Nov 20 16:59 ER.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 ER.iv6
> -rw-r--r-- 1 root root 132K Nov 20 16:59 ES.iv4
> -rw-r--r-- 1 root root  63K Nov 20 16:59 ES.iv6
> -rw-r--r-- 1 root root 1.9K Nov 20 16:59 ET.iv4
> -rw-r--r-- 1 root root   96 Nov 20 16:59 ET.iv6
> -rw-r--r-- 1 root root  23K Nov 20 16:59 EU.iv4
> -rw-r--r-- 1 root root  52K Nov 20 16:59 EU.iv6
> -rw-r--r-- 1 root root  13K Nov 20 16:59 FI.iv4
> -rw-r--r-- 1 root root  12K Nov 20 16:59 FI.iv6
> -rw-r--r-- 1 root root  912 Nov 20 16:59 FJ.iv4
> -rw-r--r-- 1 root root  736 Nov 20 16:59 FJ.iv6
> -rw-r--r-- 1 root root   32 Nov 20 16:59 FK.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 FK.iv6
> -rw-r--r-- 1 root root  152 Nov 20 16:59 FM.iv4
> -rw-r--r-- 1 root root   96 Nov 20 16:59 FM.iv6
> -rw-r--r-- 1 root root  104 Nov 20 16:59 FO.iv4
> -rw-r--r-- 1 root root  160 Nov 20 16:59 FO.iv6
> -rw-r--r-- 1 root root  79K Nov 20 16:59 FR.iv4
> -rw-r--r-- 1 root root  78K Nov 20 16:59 FR.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 FX.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 FX.iv6
> -rw-r--r-- 1 root root 1.1K Nov 20 16:59 GA.iv4
> -rw-r--r-- 1 root root  352 Nov 20 16:59 GA.iv6
> -rw-r--r-- 1 root root 153K Nov 20 16:59 GB.iv4
> -rw-r--r-- 1 root root 122K Nov 20 16:59 GB.iv6
> -rw-r--r-- 1 root root  240 Nov 20 16:59 GD.iv4
> -rw-r--r-- 1 root root 1.1K Nov 20 16:59 GD.iv6
> -rw-r--r-- 1 root root 4.6K Nov 20 16:59 GE.iv4
> -rw-r--r-- 1 root root 2.0K Nov 20 16:59 GE.iv6
> -rw-r--r-- 1 root root  152 Nov 20 16:59 GF.iv4
> -rw-r--r-- 1 root root  224 Nov 20 16:59 GF.iv6
> -rw-r--r-- 1 root root  336 Nov 20 16:59 GG.iv4
> -rw-r--r-- 1 root root  128 Nov 20 16:59 GG.iv6
> -rw-r--r-- 1 root root 4.7K Nov 20 16:59 GH.iv4
> -rw-r--r-- 1 root root 1.3K Nov 20 16:59 GH.iv6
> -rw-r--r-- 1 root root 1.7K Nov 20 16:59 GI.iv4
> -rw-r--r-- 1 root root  608 Nov 20 16:59 GI.iv6
> -rw-r--r-- 1 root root  232 Nov 20 16:59 GL.iv4
> -rw-r--r-- 1 root root  128 Nov 20 16:59 GL.iv6
> -rw-r--r-- 1 root root  472 Nov 20 16:59 GM.iv4
> -rw-r--r-- 1 root root  128 Nov 20 16:59 GM.iv6
> -rw-r--r-- 1 root root  512 Nov 20 16:59 GN.iv4
> -rw-r--r-- 1 root root  224 Nov 20 16:59 GN.iv6
> -rw-r--r-- 1 root root  192 Nov 20 16:59 GP.iv4
> -rw-r--r-- 1 root root  128 Nov 20 16:59 GP.iv6
> -rw-r--r-- 1 root root  304 Nov 20 16:59 GQ.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 GQ.iv6
> -rw-r--r-- 1 root root  11K Nov 20 16:59 GR.iv4
> -rw-r--r-- 1 root root 6.7K Nov 20 16:59 GR.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 GS.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 GS.iv6
> -rw-r--r-- 1 root root 5.8K Nov 20 16:59 GT.iv4
> -rw-r--r-- 1 root root 3.9K Nov 20 16:59 GT.iv6
> -rw-r--r-- 1 root root  600 Nov 20 16:59 GU.iv4
> -rw-r--r-- 1 root root  352 Nov 20 16:59 GU.iv6
> -rw-r--r-- 1 root root   64 Nov 20 16:59 GW.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 GW.iv6
> -rw-r--r-- 1 root root  976 Nov 20 16:59 GY.iv4
> -rw-r--r-- 1 root root  608 Nov 20 16:59 GY.iv6
> -rw-r--r-- 1 root root  91K Nov 20 16:59 HK.iv4
> -rw-r--r-- 1 root root  36K Nov 20 16:59 HK.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 HM.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 HM.iv6
> -rw-r--r-- 1 root root 6.6K Nov 20 16:59 HN.iv4
> -rw-r--r-- 1 root root 4.2K Nov 20 16:59 HN.iv6
> -rw-r--r-- 1 root root 4.2K Nov 20 16:59 HR.iv4
> -rw-r--r-- 1 root root 3.7K Nov 20 16:59 HR.iv6
> -rw-r--r-- 1 root root 1.3K Nov 20 16:59 HT.iv4
> -rw-r--r-- 1 root root  288 Nov 20 16:59 HT.iv6
> -rw-r--r-- 1 root root  13K Nov 20 16:59 HU.iv4
> -rw-r--r-- 1 root root 6.6K Nov 20 16:59 HU.iv6
> -rw-r--r-- 1 root root 131K Nov 20 16:59 ID.iv4
> -rw-r--r-- 1 root root  81K Nov 20 16:59 ID.iv6
> -rw-r--r-- 1 root root  12K Nov 20 16:59 IE.iv4
> -rw-r--r-- 1 root root  34K Nov 20 16:59 IE.iv6
> -rw-r--r-- 1 root root  53K Nov 20 16:59 IL.iv4
> -rw-r--r-- 1 root root  31K Nov 20 16:59 IL.iv6
> -rw-r--r-- 1 root root  672 Nov 20 16:59 IM.iv4
> -rw-r--r-- 1 root root  352 Nov 20 16:59 IM.iv6
> -rw-r--r-- 1 root root 332K Nov 20 16:59 IN.iv4
> -rw-r--r-- 1 root root 223K Nov 20 16:59 IN.iv6
> -rw-r--r-- 1 root root   16 Nov 20 16:59 IO.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 IO.iv6
> -rw-r--r-- 1 root root  15K Nov 20 16:59 IQ.iv4
> -rw-r--r-- 1 root root 5.1K Nov 20 16:59 IQ.iv6
> -rw-r--r-- 1 root root  60K Nov 20 16:59 IR.iv4
> -rw-r--r-- 1 root root  15K Nov 20 16:59 IR.iv6
> -rw-r--r-- 1 root root 2.0K Nov 20 16:59 IS.iv4
> -rw-r--r-- 1 root root 2.3K Nov 20 16:59 IS.iv6
> -rw-r--r-- 1 root root  61K Nov 20 16:59 IT.iv4
> -rw-r--r-- 1 root root  35K Nov 20 16:59 IT.iv6
> -rw-r--r-- 1 root root  536 Nov 20 16:59 JE.iv4
> -rw-r--r-- 1 root root  128 Nov 20 16:59 JE.iv6
> -rw-r--r-- 1 root root 3.0K Nov 20 16:59 JM.iv4
> -rw-r--r-- 1 root root  256 Nov 20 16:59 JM.iv6
> -rw-r--r-- 1 root root 9.4K Nov 20 16:59 JO.iv4
> -rw-r--r-- 1 root root  11K Nov 20 16:59 JO.iv6
> -rw-r--r-- 1 root root  95K Nov 20 16:59 JP.iv4
> -rw-r--r-- 1 root root  41K Nov 20 16:59 JP.iv6
> -rw-r--r-- 1 root root  12K Nov 20 16:59 KE.iv4
> -rw-r--r-- 1 root root 2.6K Nov 20 16:59 KE.iv6
> -rw-r--r-- 1 root root 2.8K Nov 20 16:59 KG.iv4
> -rw-r--r-- 1 root root  736 Nov 20 16:59 KG.iv6
> -rw-r--r-- 1 root root  14K Nov 20 16:59 KH.iv4
> -rw-r--r-- 1 root root 3.8K Nov 20 16:59 KH.iv6
> -rw-r--r-- 1 root root  200 Nov 20 16:59 KI.iv4
> -rw-r--r-- 1 root root   96 Nov 20 16:59 KI.iv6
> -rw-r--r-- 1 root root  136 Nov 20 16:59 KM.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 KM.iv6
> -rw-r--r-- 1 root root   64 Nov 20 16:59 KN.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 KN.iv6
> -rw-r--r-- 1 root root   40 Nov 20 16:59 KP.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 KP.iv6
> -rw-r--r-- 1 root root 158K Nov 20 16:59 KR.iv4
> -rw-r--r-- 1 root root  13K Nov 20 16:59 KR.iv6
> -rw-r--r-- 1 root root  16K Nov 20 16:59 KW.iv4
> -rw-r--r-- 1 root root 3.2K Nov 20 16:59 KW.iv6
> -rw-r--r-- 1 root root  424 Nov 20 16:59 KY.iv4
> -rw-r--r-- 1 root root  864 Nov 20 16:59 KY.iv6
> -rw-r--r-- 1 root root  31K Nov 20 16:59 KZ.iv4
> -rw-r--r-- 1 root root 7.0K Nov 20 16:59 KZ.iv6
> -rw-r--r-- 1 root root 2.4K Nov 20 16:59 LA.iv4
> -rw-r--r-- 1 root root 1.1K Nov 20 16:59 LA.iv6
> -rw-r--r-- 1 root root  13K Nov 20 16:59 LB.iv4
> -rw-r--r-- 1 root root 5.0K Nov 20 16:59 LB.iv6
> -rw-r--r-- 1 root root  432 Nov 20 16:59 LC.iv4
> -rw-r--r-- 1 root root  640 Nov 20 16:59 LC.iv6
> -rw-r--r-- 1 root root  696 Nov 20 16:59 LI.iv4
> -rw-r--r-- 1 root root 2.0K Nov 20 16:59 LI.iv6
> -rw-r--r-- 1 root root 3.2K Nov 20 16:59 LK.iv4
> -rw-r--r-- 1 root root 4.9K Nov 20 16:59 LK.iv6
> -rw-r--r-- 1 root root  432 Nov 20 16:59 LR.iv4
> -rw-r--r-- 1 root root  160 Nov 20 16:59 LR.iv6
> -rw-r--r-- 1 root root  496 Nov 20 16:59 LS.iv4
> -rw-r--r-- 1 root root  192 Nov 20 16:59 LS.iv6
> -rw-r--r-- 1 root root  15K Nov 20 16:59 LT.iv4
> -rw-r--r-- 1 root root 6.6K Nov 20 16:59 LT.iv6
> -rw-r--r-- 1 root root 5.1K Nov 20 16:59 LU.iv4
> -rw-r--r-- 1 root root 9.8K Nov 20 16:59 LU.iv6
> -rw-r--r-- 1 root root 8.2K Nov 20 16:59 LV.iv4
> -rw-r--r-- 1 root root 4.4K Nov 20 16:59 LV.iv6
> -rw-r--r-- 1 root root 2.0K Nov 20 16:59 LY.iv4
> -rw-r--r-- 1 root root  128 Nov 20 16:59 LY.iv6
> -rw-r--r-- 1 root root  14K Nov 20 16:59 MA.iv4
> -rw-r--r-- 1 root root  800 Nov 20 16:59 MA.iv6
> -rw-r--r-- 1 root root  240 Nov 20 16:59 MC.iv4
> -rw-r--r-- 1 root root   96 Nov 20 16:59 MC.iv6
> -rw-r--r-- 1 root root 6.2K Nov 20 16:59 MD.iv4
> -rw-r--r-- 1 root root 3.5K Nov 20 16:59 MD.iv6
> -rw-r--r-- 1 root root  784 Nov 20 16:59 ME.iv4
> -rw-r--r-- 1 root root  576 Nov 20 16:59 ME.iv6
> -rw-r--r-- 1 root root  152 Nov 20 16:59 MF.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 MF.iv6
> -rw-r--r-- 1 root root 2.4K Nov 20 16:59 MG.iv4
> -rw-r--r-- 1 root root  224 Nov 20 16:59 MG.iv6
> -rw-r--r-- 1 root root  128 Nov 20 16:59 MH.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 MH.iv6
> -rw-r--r-- 1 root root 5.3K Nov 20 16:59 MK.iv4
> -rw-r--r-- 1 root root 1.4K Nov 20 16:59 MK.iv6
> -rw-r--r-- 1 root root  648 Nov 20 16:59 ML.iv4
> -rw-r--r-- 1 root root  160 Nov 20 16:59 ML.iv6
> -rw-r--r-- 1 root root 4.9K Nov 20 16:59 MM.iv4
> -rw-r--r-- 1 root root  16K Nov 20 16:59 MM.iv6
> -rw-r--r-- 1 root root 3.8K Nov 20 16:59 MN.iv4
> -rw-r--r-- 1 root root 1.2K Nov 20 16:59 MN.iv6
> -rw-r--r-- 1 root root  896 Nov 20 16:59 MO.iv4
> -rw-r--r-- 1 root root  448 Nov 20 16:59 MO.iv6
> -rw-r--r-- 1 root root  272 Nov 20 16:59 MP.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 MP.iv6
> -rw-r--r-- 1 root root  184 Nov 20 16:59 MQ.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 MQ.iv6
> -rw-r--r-- 1 root root  608 Nov 20 16:59 MR.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 MR.iv6
> -rw-r--r-- 1 root root   48 Nov 20 16:59 MS.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 MS.iv6
> -rw-r--r-- 1 root root 4.2K Nov 20 16:59 MT.iv4
> -rw-r--r-- 1 root root 1.4K Nov 20 16:59 MT.iv6
> -rw-r--r-- 1 root root 7.7K Nov 20 16:59 MU.iv4
> -rw-r--r-- 1 root root 1.8K Nov 20 16:59 MU.iv6
> -rw-r--r-- 1 root root 2.7K Nov 20 16:59 MV.iv4
> -rw-r--r-- 1 root root 1.3K Nov 20 16:59 MV.iv6
> -rw-r--r-- 1 root root 1.7K Nov 20 16:59 MW.iv4
> -rw-r--r-- 1 root root  640 Nov 20 16:59 MW.iv6
> -rw-r--r-- 1 root root 156K Nov 20 16:59 MX.iv4
> -rw-r--r-- 1 root root 142K Nov 20 16:59 MX.iv6
> -rw-r--r-- 1 root root  25K Nov 20 16:59 MY.iv4
> -rw-r--r-- 1 root root  21K Nov 20 16:59 MY.iv6
> -rw-r--r-- 1 root root 6.4K Nov 20 16:59 MZ.iv4
> -rw-r--r-- 1 root root  608 Nov 20 16:59 MZ.iv6
> -rw-r--r-- 1 root root 1016 Nov 20 16:59 NA.iv4
> -rw-r--r-- 1 root root  352 Nov 20 16:59 NA.iv6
> -rw-r--r-- 1 root root  600 Nov 20 16:59 NC.iv4
> -rw-r--r-- 1 root root  416 Nov 20 16:59 NC.iv6
> -rw-r--r-- 1 root root  672 Nov 20 16:59 NE.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 NE.iv6
> -rw-r--r-- 1 root root   64 Nov 20 16:59 NF.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 NF.iv6
> -rw-r--r-- 1 root root  18K Nov 20 16:59 NG.iv4
> -rw-r--r-- 1 root root 2.9K Nov 20 16:59 NG.iv6
> -rw-r--r-- 1 root root 3.1K Nov 20 16:59 NI.iv4
> -rw-r--r-- 1 root root 1.1K Nov 20 16:59 NI.iv6
> -rw-r--r-- 1 root root  95K Nov 20 16:59 NL.iv4
> -rw-r--r-- 1 root root 112K Nov 20 16:59 NL.iv6
> -rw-r--r-- 1 root root  15K Nov 20 16:59 NO.iv4
> -rw-r--r-- 1 root root  18K Nov 20 16:59 NO.iv6
> -rw-r--r-- 1 root root 6.8K Nov 20 16:59 NP.iv4
> -rw-r--r-- 1 root root 7.0K Nov 20 16:59 NP.iv6
> -rw-r--r-- 1 root root   88 Nov 20 16:59 NR.iv4
> -rw-r--r-- 1 root root   96 Nov 20 16:59 NR.iv6
> -rw-r--r-- 1 root root   48 Nov 20 16:59 NU.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 NU.iv6
> -rw-r--r-- 1 root root  32K Nov 20 16:59 NZ.iv4
> -rw-r--r-- 1 root root  21K Nov 20 16:59 NZ.iv6
> -rw-r--r-- 1 root root 7.1K Nov 20 16:59 OM.iv4
> -rw-r--r-- 1 root root  704 Nov 20 16:59 OM.iv6
> -rw-r--r-- 1 root root  12K Nov 20 16:59 PA.iv4
> -rw-r--r-- 1 root root 5.4K Nov 20 16:59 PA.iv6
> -rw-r--r-- 1 root root  18K Nov 20 16:59 PE.iv4
> -rw-r--r-- 1 root root  17K Nov 20 16:59 PE.iv6
> -rw-r--r-- 1 root root 2.1K Nov 20 16:59 PF.iv4
> -rw-r--r-- 1 root root  224 Nov 20 16:59 PF.iv6
> -rw-r--r-- 1 root root 1.3K Nov 20 16:59 PG.iv4
> -rw-r--r-- 1 root root  704 Nov 20 16:59 PG.iv6
> -rw-r--r-- 1 root root  35K Nov 20 16:59 PH.iv4
> -rw-r--r-- 1 root root  18K Nov 20 16:59 PH.iv6
> -rw-r--r-- 1 root root  45K Nov 20 16:59 PK.iv4
> -rw-r--r-- 1 root root 8.7K Nov 20 16:59 PK.iv6
> -rw-r--r-- 1 root root  60K Nov 20 16:59 PL.iv4
> -rw-r--r-- 1 root root  34K Nov 20 16:59 PL.iv6
> -rw-r--r-- 1 root root  160 Nov 20 16:59 PM.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 PM.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 PN.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 PN.iv6
> -rw-r--r-- 1 root root 7.3K Nov 20 16:59 PR.iv4
> -rw-r--r-- 1 root root 1.6K Nov 20 16:59 PR.iv6
> -rw-r--r-- 1 root root 9.3K Nov 20 16:59 PS.iv4
> -rw-r--r-- 1 root root 2.1K Nov 20 16:59 PS.iv6
> -rw-r--r-- 1 root root 6.7K Nov 20 16:59 PT.iv4
> -rw-r--r-- 1 root root 4.5K Nov 20 16:59 PT.iv6
> -rw-r--r-- 1 root root   64 Nov 20 16:59 PW.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 PW.iv6
> -rw-r--r-- 1 root root 4.8K Nov 20 16:59 PY.iv4
> -rw-r--r-- 1 root root 5.3K Nov 20 16:59 PY.iv6
> -rw-r--r-- 1 root root 2.6K Nov 20 16:59 QA.iv4
> -rw-r--r-- 1 root root 5.2K Nov 20 16:59 QA.iv6
> -rw-r--r-- 1 root root  536 Nov 20 16:59 RE.iv4
> -rw-r--r-- 1 root root  864 Nov 20 16:59 RE.iv6
> -rw-r--r-- 1 root root  54K Nov 20 16:59 RO.iv4
> -rw-r--r-- 1 root root  14K Nov 20 16:59 RO.iv6
> -rw-r--r-- 1 root root  14K Nov 20 16:59 RS.iv4
> -rw-r--r-- 1 root root 3.9K Nov 20 16:59 RS.iv6
> -rw-r--r-- 1 root root 300K Nov 20 16:59 RU.iv4
> -rw-r--r-- 1 root root 119K Nov 20 16:59 RU.iv6
> -rw-r--r-- 1 root root 1.5K Nov 20 16:59 RW.iv4
> -rw-r--r-- 1 root root  256 Nov 20 16:59 RW.iv6
> -rw-r--r-- 1 root root  60K Nov 20 16:59 SA.iv4
> -rw-r--r-- 1 root root  39K Nov 20 16:59 SA.iv6
> -rw-r--r-- 1 root root  352 Nov 20 16:59 SB.iv4
> -rw-r--r-- 1 root root  192 Nov 20 16:59 SB.iv6
> -rw-r--r-- 1 root root  45K Nov 20 16:59 SC.iv4
> -rw-r--r-- 1 root root 1.7K Nov 20 16:59 SC.iv6
> -rw-r--r-- 1 root root 3.5K Nov 20 16:59 SD.iv4
> -rw-r--r-- 1 root root  512 Nov 20 16:59 SD.iv6
> -rw-r--r-- 1 root root  45K Nov 20 16:59 SE.iv4
> -rw-r--r-- 1 root root  35K Nov 20 16:59 SE.iv6
> -rw-r--r-- 1 root root  54K Nov 20 16:59 SG.iv4
> -rw-r--r-- 1 root root  38K Nov 20 16:59 SG.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 SH.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 SH.iv6
> -rw-r--r-- 1 root root 6.1K Nov 20 16:59 SI.iv4
> -rw-r--r-- 1 root root 5.9K Nov 20 16:59 SI.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 SJ.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 SJ.iv6
> -rw-r--r-- 1 root root 6.5K Nov 20 16:59 SK.iv4
> -rw-r--r-- 1 root root 5.0K Nov 20 16:59 SK.iv6
> -rw-r--r-- 1 root root  688 Nov 20 16:59 SL.iv4
> -rw-r--r-- 1 root root  224 Nov 20 16:59 SL.iv6
> -rw-r--r-- 1 root root  904 Nov 20 16:59 SM.iv4
> -rw-r--r-- 1 root root  320 Nov 20 16:59 SM.iv6
> -rw-r--r-- 1 root root 1.7K Nov 20 16:59 SN.iv4
> -rw-r--r-- 1 root root  288 Nov 20 16:59 SN.iv6
> -rw-r--r-- 1 root root  904 Nov 20 16:59 SO.iv4
> -rw-r--r-- 1 root root  384 Nov 20 16:59 SO.iv6
> -rw-r--r-- 1 root root 2.9K Nov 20 16:59 SR.iv4
> -rw-r--r-- 1 root root 1.3K Nov 20 16:59 SR.iv6
> -rw-r--r-- 1 root root  600 Nov 20 16:59 SS.iv4
> -rw-r--r-- 1 root root  128 Nov 20 16:59 SS.iv6
> -rw-r--r-- 1 root root  176 Nov 20 16:59 ST.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 ST.iv6
> -rw-r--r-- 1 root root 8.6K Nov 20 16:59 SV.iv4
> -rw-r--r-- 1 root root 1.4K Nov 20 16:59 SV.iv6
> -rw-r--r-- 1 root root  432 Nov 20 16:59 SX.iv4
> -rw-r--r-- 1 root root  448 Nov 20 16:59 SX.iv6
> -rw-r--r-- 1 root root 2.5K Nov 20 16:59 SY.iv4
> -rw-r--r-- 1 root root 1.1K Nov 20 16:59 SY.iv6
> -rw-r--r-- 1 root root  408 Nov 20 16:59 SZ.iv4
> -rw-r--r-- 1 root root  160 Nov 20 16:59 SZ.iv6
> -rw-r--r-- 1 root root  232 Nov 20 16:59 TC.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 TC.iv6
> -rw-r--r-- 1 root root  568 Nov 20 16:59 TD.iv4
> -rw-r--r-- 1 root root  128 Nov 20 16:59 TD.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 TF.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 TF.iv6
> -rw-r--r-- 1 root root  680 Nov 20 16:59 TG.iv4
> -rw-r--r-- 1 root root  160 Nov 20 16:59 TG.iv6
> -rw-r--r-- 1 root root  71K Nov 20 16:59 TH.iv4
> -rw-r--r-- 1 root root  42K Nov 20 16:59 TH.iv6
> -rw-r--r-- 1 root root 1.7K Nov 20 16:59 TJ.iv4
> -rw-r--r-- 1 root root  320 Nov 20 16:59 TJ.iv6
> -rw-r--r-- 1 root root   40 Nov 20 16:59 TK.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 TK.iv6
> -rw-r--r-- 1 root root  568 Nov 20 16:59 TL.iv4
> -rw-r--r-- 1 root root  736 Nov 20 16:59 TL.iv6
> -rw-r--r-- 1 root root  120 Nov 20 16:59 TM.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 TM.iv6
> -rw-r--r-- 1 root root 6.6K Nov 20 16:59 TN.iv4
> -rw-r--r-- 1 root root  416 Nov 20 16:59 TN.iv6
> -rw-r--r-- 1 root root  232 Nov 20 16:59 TO.iv4
> -rw-r--r-- 1 root root  160 Nov 20 16:59 TO.iv6
> -rw-r--r-- 1 root root  98K Nov 20 16:59 TR.iv4
> -rw-r--r-- 1 root root  32K Nov 20 16:59 TR.iv6
> -rw-r--r-- 1 root root 3.2K Nov 20 16:59 TT.iv4
> -rw-r--r-- 1 root root 1.4K Nov 20 16:59 TT.iv6
> -rw-r--r-- 1 root root   72 Nov 20 16:59 TV.iv4
> -rw-r--r-- 1 root root   64 Nov 20 16:59 TV.iv6
> -rw-r--r-- 1 root root  53K Nov 20 16:59 TW.iv4
> -rw-r--r-- 1 root root  34K Nov 20 16:59 TW.iv6
> -rw-r--r-- 1 root root 5.0K Nov 20 16:59 TZ.iv4
> -rw-r--r-- 1 root root 1.6K Nov 20 16:59 TZ.iv6
> -rw-r--r-- 1 root root  88K Nov 20 16:59 UA.iv4
> -rw-r--r-- 1 root root  29K Nov 20 16:59 UA.iv6
> -rw-r--r-- 1 root root 5.2K Nov 20 16:59 UG.iv4
> -rw-r--r-- 1 root root  960 Nov 20 16:59 UG.iv6
> -rw-r--r-- 1 root root    0 Nov 20 16:59 UM.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 UM.iv6
> -rw-r--r-- 1 root root 2.0M Nov 20 16:59 US.iv4
> -rw-r--r-- 1 root root 841K Nov 20 16:59 US.iv6
> -rw-r--r-- 1 root root 6.5K Nov 20 16:59 UY.iv4
> -rw-r--r-- 1 root root 2.0K Nov 20 16:59 UY.iv6
> -rw-r--r-- 1 root root 2.0K Nov 20 16:59 UZ.iv4
> -rw-r--r-- 1 root root 1.2K Nov 20 16:59 UZ.iv6
> -rw-r--r-- 1 root root   88 Nov 20 16:59 VA.iv4
> -rw-r--r-- 1 root root  320 Nov 20 16:59 VA.iv6
> -rw-r--r-- 1 root root  184 Nov 20 16:59 VC.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 VC.iv6
> -rw-r--r-- 1 root root  15K Nov 20 16:59 VE.iv4
> -rw-r--r-- 1 root root 4.0K Nov 20 16:59 VE.iv6
> -rw-r--r-- 1 root root 1.1K Nov 20 16:59 VG.iv4
> -rw-r--r-- 1 root root  480 Nov 20 16:59 VG.iv6
> -rw-r--r-- 1 root root  736 Nov 20 16:59 VI.iv4
> -rw-r--r-- 1 root root  160 Nov 20 16:59 VI.iv6
> -rw-r--r-- 1 root root  86K Nov 20 16:59 VN.iv4
> -rw-r--r-- 1 root root  79K Nov 20 16:59 VN.iv6
> -rw-r--r-- 1 root root  560 Nov 20 16:59 VU.iv4
> -rw-r--r-- 1 root root  416 Nov 20 16:59 VU.iv6
> -rw-r--r-- 1 root root  136 Nov 20 16:59 WF.iv4
> -rw-r--r-- 1 root root   32 Nov 20 16:59 WF.iv6
> -rw-r--r-- 1 root root  504 Nov 20 16:59 WS.iv4
> -rw-r--r-- 1 root root  256 Nov 20 16:59 WS.iv6
> -rw-r--r-- 1 root root 1.2K Nov 20 16:59 YE.iv4
> -rw-r--r-- 1 root root  448 Nov 20 16:59 YE.iv6
> -rw-r--r-- 1 root root   72 Nov 20 16:59 YT.iv4
> -rw-r--r-- 1 root root    0 Nov 20 16:59 YT.iv6
> -rw-r--r-- 1 root root  52K Nov 20 16:59 ZA.iv4
> -rw-r--r-- 1 root root  17K Nov 20 16:59 ZA.iv6
> -rw-r--r-- 1 root root 2.2K Nov 20 16:59 ZM.iv4
> -rw-r--r-- 1 root root  416 Nov 20 16:59 ZM.iv6
> -rw-r--r-- 1 root root 2.0K Nov 20 16:59 ZW.iv4
> -rw-r--r-- 1 root root  480 Nov 20 16:59 ZW.iv6

> [root(a)machine ~]# time location export --directory=tmp --format=xt_geoip
> 
> real	0m41.384s
> user	0m40.998s
> sys	0m0.174s


> [root(a)machine tmp]# ls -lah
> total 4.8M
> drwxr-xr-x 2 root root  16K Nov 20 17:18 .
> drwxr-xr-x 4 root root 4.0K Nov 20 17:18 ..
> -rw-r--r-- 1 root root 3.2K Nov 20 17:19 A1.iv4
> -rw-r--r-- 1 root root 2.2K Nov 20 17:18 A1.iv6
> -rw-r--r-- 1 root root 4.5K Nov 20 17:19 A2.iv4
> -rw-r--r-- 1 root root  704 Nov 20 17:18 A2.iv6
> -rw-r--r-- 1 root root 2.3K Nov 20 17:19 A3.iv4
> -rw-r--r-- 1 root root 2.3K Nov 20 17:18 A3.iv6
> -rw-r--r-- 1 root root  136 Nov 20 17:19 AD.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 AD.iv6
> -rw-r--r-- 1 root root 1.3K Nov 20 17:19 AE.iv4
> -rw-r--r-- 1 root root 1.9K Nov 20 17:18 AE.iv6
> -rw-r--r-- 1 root root  960 Nov 20 17:19 AF.iv4
> -rw-r--r-- 1 root root  960 Nov 20 17:18 AF.iv6
> -rw-r--r-- 1 root root  248 Nov 20 17:19 AG.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 AG.iv6
> -rw-r--r-- 1 root root   56 Nov 20 17:19 AI.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 AI.iv6
> -rw-r--r-- 1 root root 1.3K Nov 20 17:19 AL.iv4
> -rw-r--r-- 1 root root 1.9K Nov 20 17:18 AL.iv6
> -rw-r--r-- 1 root root 1.1K Nov 20 17:19 AM.iv4
> -rw-r--r-- 1 root root 1.3K Nov 20 17:18 AM.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 AN.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 AN.iv6
> -rw-r--r-- 1 root root  640 Nov 20 17:19 AO.iv4
> -rw-r--r-- 1 root root  896 Nov 20 17:18 AO.iv6
> -rw-r--r-- 1 root root 1.6K Nov 20 17:19 AP.iv4
> -rw-r--r-- 1 root root  576 Nov 20 17:18 AP.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 AQ.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 AQ.iv6
> -rw-r--r-- 1 root root  15K Nov 20 17:19 AR.iv4
> -rw-r--r-- 1 root root  32K Nov 20 17:18 AR.iv6
> -rw-r--r-- 1 root root   24 Nov 20 17:19 AS.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 AS.iv6
> -rw-r--r-- 1 root root  14K Nov 20 17:19 AT.iv4
> -rw-r--r-- 1 root root  17K Nov 20 17:18 AT.iv6
> -rw-r--r-- 1 root root  63K Nov 20 17:19 AU.iv4
> -rw-r--r-- 1 root root  47K Nov 20 17:18 AU.iv6
> -rw-r--r-- 1 root root   64 Nov 20 17:19 AW.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 AW.iv6
> -rw-r--r-- 1 root root    8 Nov 20 17:19 AX.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 AX.iv6
> -rw-r--r-- 1 root root 1.2K Nov 20 17:19 AZ.iv4
> -rw-r--r-- 1 root root 1.5K Nov 20 17:18 AZ.iv6
> -rw-r--r-- 1 root root 1.3K Nov 20 17:19 BA.iv4
> -rw-r--r-- 1 root root 1.3K Nov 20 17:18 BA.iv6
> -rw-r--r-- 1 root root  248 Nov 20 17:19 BB.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 BB.iv6
> -rw-r--r-- 1 root root  12K Nov 20 17:19 BD.iv4
> -rw-r--r-- 1 root root  27K Nov 20 17:18 BD.iv6
> -rw-r--r-- 1 root root 6.9K Nov 20 17:19 BE.iv4
> -rw-r--r-- 1 root root 9.3K Nov 20 17:18 BE.iv6
> -rw-r--r-- 1 root root  320 Nov 20 17:19 BF.iv4
> -rw-r--r-- 1 root root  512 Nov 20 17:18 BF.iv6
> -rw-r--r-- 1 root root  11K Nov 20 17:19 BG.iv4
> -rw-r--r-- 1 root root 6.9K Nov 20 17:18 BG.iv6
> -rw-r--r-- 1 root root  472 Nov 20 17:19 BH.iv4
> -rw-r--r-- 1 root root  512 Nov 20 17:18 BH.iv6
> -rw-r--r-- 1 root root  112 Nov 20 17:19 BI.iv4
> -rw-r--r-- 1 root root  256 Nov 20 17:18 BI.iv6
> -rw-r--r-- 1 root root  224 Nov 20 17:19 BJ.iv4
> -rw-r--r-- 1 root root  384 Nov 20 17:18 BJ.iv6
> -rw-r--r-- 1 root root   48 Nov 20 17:19 BL.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 BL.iv6
> -rw-r--r-- 1 root root  336 Nov 20 17:19 BM.iv4
> -rw-r--r-- 1 root root  224 Nov 20 17:18 BM.iv6
> -rw-r--r-- 1 root root  336 Nov 20 17:19 BN.iv4
> -rw-r--r-- 1 root root  320 Nov 20 17:18 BN.iv6
> -rw-r--r-- 1 root root  944 Nov 20 17:19 BO.iv4
> -rw-r--r-- 1 root root 1.5K Nov 20 17:18 BO.iv6
> -rw-r--r-- 1 root root   88 Nov 20 17:19 BQ.iv4
> -rw-r--r-- 1 root root  160 Nov 20 17:18 BQ.iv6
> -rw-r--r-- 1 root root  91K Nov 20 17:19 BR.iv4
> -rw-r--r-- 1 root root 258K Nov 20 17:18 BR.iv6
> -rw-r--r-- 1 root root  152 Nov 20 17:19 BS.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 BS.iv6
> -rw-r--r-- 1 root root  184 Nov 20 17:19 BT.iv4
> -rw-r--r-- 1 root root  480 Nov 20 17:18 BT.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 BV.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 BV.iv6
> -rw-r--r-- 1 root root  328 Nov 20 17:19 BW.iv4
> -rw-r--r-- 1 root root  448 Nov 20 17:18 BW.iv6
> -rw-r--r-- 1 root root  808 Nov 20 17:19 BY.iv4
> -rw-r--r-- 1 root root 1.1K Nov 20 17:18 BY.iv6
> -rw-r--r-- 1 root root  656 Nov 20 17:19 BZ.iv4
> -rw-r--r-- 1 root root 1.0K Nov 20 17:18 BZ.iv6
> -rw-r--r-- 1 root root  65K Nov 20 17:19 CA.iv4
> -rw-r--r-- 1 root root  25K Nov 20 17:18 CA.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 CC.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 CC.iv6
> -rw-r--r-- 1 root root  480 Nov 20 17:19 CD.iv4
> -rw-r--r-- 1 root root  448 Nov 20 17:18 CD.iv6
> -rw-r--r-- 1 root root   40 Nov 20 17:19 CF.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 CF.iv6
> -rw-r--r-- 1 root root  152 Nov 20 17:19 CG.iv4
> -rw-r--r-- 1 root root  384 Nov 20 17:18 CG.iv6
> -rw-r--r-- 1 root root  20K Nov 20 17:19 CH.iv4
> -rw-r--r-- 1 root root  24K Nov 20 17:18 CH.iv6
> -rw-r--r-- 1 root root 1.7K Nov 20 17:19 CI.iv4
> -rw-r--r-- 1 root root  480 Nov 20 17:18 CI.iv6
> -rw-r--r-- 1 root root    8 Nov 20 17:19 CK.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 CK.iv6
> -rw-r--r-- 1 root root 6.3K Nov 20 17:19 CL.iv4
> -rw-r--r-- 1 root root 8.6K Nov 20 17:18 CL.iv6
> -rw-r--r-- 1 root root  248 Nov 20 17:19 CM.iv4
> -rw-r--r-- 1 root root  320 Nov 20 17:18 CM.iv6
> -rw-r--r-- 1 root root  67K Nov 20 17:19 CN.iv4
> -rw-r--r-- 1 root root  60K Nov 20 17:18 CN.iv6
> -rw-r--r-- 1 root root 4.6K Nov 20 17:19 CO.iv4
> -rw-r--r-- 1 root root  12K Nov 20 17:18 CO.iv6
> -rw-r--r-- 1 root root 1.6K Nov 20 17:19 CR.iv4
> -rw-r--r-- 1 root root 3.2K Nov 20 17:18 CR.iv6
> -rw-r--r-- 1 root root  168 Nov 20 17:19 CU.iv4
> -rw-r--r-- 1 root root  192 Nov 20 17:18 CU.iv6
> -rw-r--r-- 1 root root   80 Nov 20 17:19 CV.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 CV.iv6
> -rw-r--r-- 1 root root  328 Nov 20 17:19 CW.iv4
> -rw-r--r-- 1 root root  512 Nov 20 17:18 CW.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 CX.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 CX.iv6
> -rw-r--r-- 1 root root 2.0K Nov 20 17:19 CY.iv4
> -rw-r--r-- 1 root root 1.7K Nov 20 17:18 CY.iv6
> -rw-r--r-- 1 root root  12K Nov 20 17:19 CZ.iv4
> -rw-r--r-- 1 root root  20K Nov 20 17:18 CZ.iv6
> -rw-r--r-- 1 root root  74K Nov 20 17:19 DE.iv4
> -rw-r--r-- 1 root root  85K Nov 20 17:18 DE.iv6
> -rw-r--r-- 1 root root   40 Nov 20 17:19 DJ.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 DJ.iv6
> -rw-r--r-- 1 root root  11K Nov 20 17:19 DK.iv4
> -rw-r--r-- 1 root root  12K Nov 20 17:18 DK.iv6
> -rw-r--r-- 1 root root   72 Nov 20 17:19 DM.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 DM.iv6
> -rw-r--r-- 1 root root 1.1K Nov 20 17:19 DO.iv4
> -rw-r--r-- 1 root root 2.1K Nov 20 17:18 DO.iv6
> -rw-r--r-- 1 root root  232 Nov 20 17:19 DZ.iv4
> -rw-r--r-- 1 root root  192 Nov 20 17:18 DZ.iv6
> -rw-r--r-- 1 root root 3.1K Nov 20 17:19 EC.iv4
> -rw-r--r-- 1 root root 5.5K Nov 20 17:18 EC.iv6
> -rw-r--r-- 1 root root 2.5K Nov 20 17:19 EE.iv4
> -rw-r--r-- 1 root root 3.9K Nov 20 17:18 EE.iv6
> -rw-r--r-- 1 root root 1.4K Nov 20 17:19 EG.iv4
> -rw-r--r-- 1 root root  384 Nov 20 17:18 EG.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 EH.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 EH.iv6
> -rw-r--r-- 1 root root    8 Nov 20 17:19 ER.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 ER.iv6
> -rw-r--r-- 1 root root  27K Nov 20 17:19 ES.iv4
> -rw-r--r-- 1 root root  29K Nov 20 17:18 ES.iv6
> -rw-r--r-- 1 root root   40 Nov 20 17:19 ET.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 ET.iv6
> -rw-r--r-- 1 root root 3.4K Nov 20 17:19 EU.iv4
> -rw-r--r-- 1 root root 2.9K Nov 20 17:18 EU.iv6
> -rw-r--r-- 1 root root 8.0K Nov 20 17:19 FI.iv4
> -rw-r--r-- 1 root root 9.3K Nov 20 17:18 FI.iv6
> -rw-r--r-- 1 root root  296 Nov 20 17:19 FJ.iv4
> -rw-r--r-- 1 root root  544 Nov 20 17:18 FJ.iv6
> -rw-r--r-- 1 root root   32 Nov 20 17:19 FK.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 FK.iv6
> -rw-r--r-- 1 root root   32 Nov 20 17:19 FM.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 FM.iv6
> -rw-r--r-- 1 root root  104 Nov 20 17:19 FO.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 FO.iv6
> -rw-r--r-- 1 root root  32K Nov 20 17:19 FR.iv4
> -rw-r--r-- 1 root root  40K Nov 20 17:18 FR.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 FX.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 FX.iv6
> -rw-r--r-- 1 root root  248 Nov 20 17:19 GA.iv4
> -rw-r--r-- 1 root root  256 Nov 20 17:18 GA.iv6
> -rw-r--r-- 1 root root  65K Nov 20 17:19 GB.iv4
> -rw-r--r-- 1 root root  63K Nov 20 17:18 GB.iv6
> -rw-r--r-- 1 root root   80 Nov 20 17:19 GD.iv4
> -rw-r--r-- 1 root root  160 Nov 20 17:18 GD.iv6
> -rw-r--r-- 1 root root 1.8K Nov 20 17:19 GE.iv4
> -rw-r--r-- 1 root root 1.6K Nov 20 17:18 GE.iv6
> -rw-r--r-- 1 root root   48 Nov 20 17:19 GF.iv4
> -rw-r--r-- 1 root root  192 Nov 20 17:18 GF.iv6
> -rw-r--r-- 1 root root  272 Nov 20 17:19 GG.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 GG.iv6
> -rw-r--r-- 1 root root  952 Nov 20 17:19 GH.iv4
> -rw-r--r-- 1 root root 1.2K Nov 20 17:18 GH.iv6
> -rw-r--r-- 1 root root  448 Nov 20 17:19 GI.iv4
> -rw-r--r-- 1 root root  384 Nov 20 17:18 GI.iv6
> -rw-r--r-- 1 root root  208 Nov 20 17:19 GL.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 GL.iv6
> -rw-r--r-- 1 root root  136 Nov 20 17:19 GM.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 GM.iv6
> -rw-r--r-- 1 root root  120 Nov 20 17:19 GN.iv4
> -rw-r--r-- 1 root root  224 Nov 20 17:18 GN.iv6
> -rw-r--r-- 1 root root  112 Nov 20 17:19 GP.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 GP.iv6
> -rw-r--r-- 1 root root   88 Nov 20 17:19 GQ.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 GQ.iv6
> -rw-r--r-- 1 root root 3.1K Nov 20 17:19 GR.iv4
> -rw-r--r-- 1 root root 2.7K Nov 20 17:18 GR.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 GS.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 GS.iv6
> -rw-r--r-- 1 root root  808 Nov 20 17:19 GT.iv4
> -rw-r--r-- 1 root root 1.6K Nov 20 17:18 GT.iv6
> -rw-r--r-- 1 root root  232 Nov 20 17:19 GU.iv4
> -rw-r--r-- 1 root root  288 Nov 20 17:18 GU.iv6
> -rw-r--r-- 1 root root   16 Nov 20 17:19 GW.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 GW.iv6
> -rw-r--r-- 1 root root  112 Nov 20 17:19 GY.iv4
> -rw-r--r-- 1 root root  192 Nov 20 17:18 GY.iv6
> -rw-r--r-- 1 root root  21K Nov 20 17:19 HK.iv4
> -rw-r--r-- 1 root root  22K Nov 20 17:18 HK.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 HM.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 HM.iv6
> -rw-r--r-- 1 root root 1.6K Nov 20 17:19 HN.iv4
> -rw-r--r-- 1 root root 3.5K Nov 20 17:18 HN.iv6
> -rw-r--r-- 1 root root 1.9K Nov 20 17:19 HR.iv4
> -rw-r--r-- 1 root root 2.2K Nov 20 17:18 HR.iv6
> -rw-r--r-- 1 root root  192 Nov 20 17:19 HT.iv4
> -rw-r--r-- 1 root root  288 Nov 20 17:18 HT.iv6
> -rw-r--r-- 1 root root 6.6K Nov 20 17:19 HU.iv4
> -rw-r--r-- 1 root root 4.8K Nov 20 17:18 HU.iv6
> -rw-r--r-- 1 root root  25K Nov 20 17:19 ID.iv4
> -rw-r--r-- 1 root root  52K Nov 20 17:18 ID.iv6
> -rw-r--r-- 1 root root 5.3K Nov 20 17:19 IE.iv4
> -rw-r--r-- 1 root root 6.4K Nov 20 17:18 IE.iv6
> -rw-r--r-- 1 root root 4.9K Nov 20 17:19 IL.iv4
> -rw-r--r-- 1 root root 4.9K Nov 20 17:18 IL.iv6
> -rw-r--r-- 1 root root  168 Nov 20 17:19 IM.iv4
> -rw-r--r-- 1 root root  320 Nov 20 17:18 IM.iv6
> -rw-r--r-- 1 root root  51K Nov 20 17:19 IN.iv4
> -rw-r--r-- 1 root root  35K Nov 20 17:18 IN.iv6
> -rw-r--r-- 1 root root   16 Nov 20 17:19 IO.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 IO.iv6
> -rw-r--r-- 1 root root 1.9K Nov 20 17:19 IQ.iv4
> -rw-r--r-- 1 root root 3.3K Nov 20 17:18 IQ.iv6
> -rw-r--r-- 1 root root  12K Nov 20 17:19 IR.iv4
> -rw-r--r-- 1 root root  12K Nov 20 17:18 IR.iv6
> -rw-r--r-- 1 root root 1.1K Nov 20 17:19 IS.iv4
> -rw-r--r-- 1 root root 2.0K Nov 20 17:18 IS.iv6
> -rw-r--r-- 1 root root  24K Nov 20 17:19 IT.iv4
> -rw-r--r-- 1 root root  30K Nov 20 17:18 IT.iv6
> -rw-r--r-- 1 root root  160 Nov 20 17:19 JE.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 JE.iv6
> -rw-r--r-- 1 root root  376 Nov 20 17:19 JM.iv4
> -rw-r--r-- 1 root root  256 Nov 20 17:18 JM.iv6
> -rw-r--r-- 1 root root  928 Nov 20 17:19 JO.iv4
> -rw-r--r-- 1 root root 1.0K Nov 20 17:18 JO.iv6
> -rw-r--r-- 1 root root  34K Nov 20 17:19 JP.iv4
> -rw-r--r-- 1 root root  20K Nov 20 17:18 JP.iv6
> -rw-r--r-- 1 root root 1.4K Nov 20 17:19 KE.iv4
> -rw-r--r-- 1 root root 1.9K Nov 20 17:18 KE.iv6
> -rw-r--r-- 1 root root  576 Nov 20 17:19 KG.iv4
> -rw-r--r-- 1 root root  704 Nov 20 17:18 KG.iv6
> -rw-r--r-- 1 root root 2.0K Nov 20 17:19 KH.iv4
> -rw-r--r-- 1 root root 2.4K Nov 20 17:18 KH.iv6
> -rw-r--r-- 1 root root   48 Nov 20 17:19 KI.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 KI.iv6
> -rw-r--r-- 1 root root   24 Nov 20 17:19 KM.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 KM.iv6
> -rw-r--r-- 1 root root   64 Nov 20 17:19 KN.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 KN.iv6
> -rw-r--r-- 1 root root    8 Nov 20 17:19 KP.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 KP.iv6
> -rw-r--r-- 1 root root  16K Nov 20 17:19 KR.iv4
> -rw-r--r-- 1 root root 5.1K Nov 20 17:18 KR.iv6
> -rw-r--r-- 1 root root 1.1K Nov 20 17:19 KW.iv4
> -rw-r--r-- 1 root root 1.1K Nov 20 17:18 KW.iv6
> -rw-r--r-- 1 root root  192 Nov 20 17:19 KY.iv4
> -rw-r--r-- 1 root root  192 Nov 20 17:18 KY.iv6
> -rw-r--r-- 1 root root 3.4K Nov 20 17:19 KZ.iv4
> -rw-r--r-- 1 root root 1.7K Nov 20 17:18 KZ.iv6
> -rw-r--r-- 1 root root  384 Nov 20 17:19 LA.iv4
> -rw-r--r-- 1 root root  576 Nov 20 17:18 LA.iv6
> -rw-r--r-- 1 root root 1.9K Nov 20 17:19 LB.iv4
> -rw-r--r-- 1 root root 3.2K Nov 20 17:18 LB.iv6
> -rw-r--r-- 1 root root  168 Nov 20 17:19 LC.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 LC.iv6
> -rw-r--r-- 1 root root  488 Nov 20 17:19 LI.iv4
> -rw-r--r-- 1 root root  832 Nov 20 17:18 LI.iv6
> -rw-r--r-- 1 root root  536 Nov 20 17:19 LK.iv4
> -rw-r--r-- 1 root root  736 Nov 20 17:18 LK.iv6
> -rw-r--r-- 1 root root  112 Nov 20 17:19 LR.iv4
> -rw-r--r-- 1 root root  160 Nov 20 17:18 LR.iv6
> -rw-r--r-- 1 root root  144 Nov 20 17:19 LS.iv4
> -rw-r--r-- 1 root root  192 Nov 20 17:18 LS.iv6
> -rw-r--r-- 1 root root 4.2K Nov 20 17:19 LT.iv4
> -rw-r--r-- 1 root root 4.8K Nov 20 17:18 LT.iv6
> -rw-r--r-- 1 root root 1.9K Nov 20 17:19 LU.iv4
> -rw-r--r-- 1 root root 3.0K Nov 20 17:18 LU.iv6
> -rw-r--r-- 1 root root 3.2K Nov 20 17:19 LV.iv4
> -rw-r--r-- 1 root root 2.9K Nov 20 17:18 LV.iv6
> -rw-r--r-- 1 root root  264 Nov 20 17:19 LY.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 LY.iv6
> -rw-r--r-- 1 root root  496 Nov 20 17:19 MA.iv4
> -rw-r--r-- 1 root root  512 Nov 20 17:18 MA.iv6
> -rw-r--r-- 1 root root  136 Nov 20 17:19 MC.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 MC.iv6
> -rw-r--r-- 1 root root 2.9K Nov 20 17:19 MD.iv4
> -rw-r--r-- 1 root root 2.7K Nov 20 17:18 MD.iv6
> -rw-r--r-- 1 root root  352 Nov 20 17:19 ME.iv4
> -rw-r--r-- 1 root root  544 Nov 20 17:18 ME.iv6
> -rw-r--r-- 1 root root   88 Nov 20 17:19 MF.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 MF.iv6
> -rw-r--r-- 1 root root  184 Nov 20 17:19 MG.iv4
> -rw-r--r-- 1 root root  224 Nov 20 17:18 MG.iv6
> -rw-r--r-- 1 root root   24 Nov 20 17:19 MH.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 MH.iv6
> -rw-r--r-- 1 root root 1.1K Nov 20 17:19 MK.iv4
> -rw-r--r-- 1 root root 1.3K Nov 20 17:18 MK.iv6
> -rw-r--r-- 1 root root  192 Nov 20 17:19 ML.iv4
> -rw-r--r-- 1 root root  160 Nov 20 17:18 ML.iv6
> -rw-r--r-- 1 root root 1.3K Nov 20 17:19 MM.iv4
> -rw-r--r-- 1 root root 2.4K Nov 20 17:18 MM.iv6
> -rw-r--r-- 1 root root  776 Nov 20 17:19 MN.iv4
> -rw-r--r-- 1 root root  928 Nov 20 17:18 MN.iv6
> -rw-r--r-- 1 root root  288 Nov 20 17:19 MO.iv4
> -rw-r--r-- 1 root root  288 Nov 20 17:18 MO.iv6
> -rw-r--r-- 1 root root   48 Nov 20 17:19 MP.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 MP.iv6
> -rw-r--r-- 1 root root   48 Nov 20 17:19 MQ.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 MQ.iv6
> -rw-r--r-- 1 root root   56 Nov 20 17:19 MR.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 MR.iv6
> -rw-r--r-- 1 root root   16 Nov 20 17:19 MS.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 MS.iv6
> -rw-r--r-- 1 root root  856 Nov 20 17:19 MT.iv4
> -rw-r--r-- 1 root root  800 Nov 20 17:18 MT.iv6
> -rw-r--r-- 1 root root  736 Nov 20 17:19 MU.iv4
> -rw-r--r-- 1 root root  896 Nov 20 17:18 MU.iv6
> -rw-r--r-- 1 root root  296 Nov 20 17:19 MV.iv4
> -rw-r--r-- 1 root root  416 Nov 20 17:18 MV.iv6
> -rw-r--r-- 1 root root  280 Nov 20 17:19 MW.iv4
> -rw-r--r-- 1 root root  576 Nov 20 17:18 MW.iv6
> -rw-r--r-- 1 root root  11K Nov 20 17:19 MX.iv4
> -rw-r--r-- 1 root root  11K Nov 20 17:18 MX.iv6
> -rw-r--r-- 1 root root 6.0K Nov 20 17:19 MY.iv4
> -rw-r--r-- 1 root root 7.8K Nov 20 17:18 MY.iv6
> -rw-r--r-- 1 root root  376 Nov 20 17:19 MZ.iv4
> -rw-r--r-- 1 root root  512 Nov 20 17:18 MZ.iv6
> -rw-r--r-- 1 root root  240 Nov 20 17:19 NA.iv4
> -rw-r--r-- 1 root root  224 Nov 20 17:18 NA.iv6
> -rw-r--r-- 1 root root  344 Nov 20 17:19 NC.iv4
> -rw-r--r-- 1 root root  352 Nov 20 17:18 NC.iv6
> -rw-r--r-- 1 root root   56 Nov 20 17:19 NE.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 NE.iv6
> -rw-r--r-- 1 root root   32 Nov 20 17:19 NF.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 NF.iv6
> -rw-r--r-- 1 root root 2.2K Nov 20 17:19 NG.iv4
> -rw-r--r-- 1 root root 2.6K Nov 20 17:18 NG.iv6
> -rw-r--r-- 1 root root  400 Nov 20 17:19 NI.iv4
> -rw-r--r-- 1 root root  736 Nov 20 17:18 NI.iv6
> -rw-r--r-- 1 root root  44K Nov 20 17:19 NL.iv4
> -rw-r--r-- 1 root root  58K Nov 20 17:18 NL.iv6
> -rw-r--r-- 1 root root 9.6K Nov 20 17:19 NO.iv4
> -rw-r--r-- 1 root root  14K Nov 20 17:18 NO.iv6
> -rw-r--r-- 1 root root 1.5K Nov 20 17:19 NP.iv4
> -rw-r--r-- 1 root root 3.0K Nov 20 17:18 NP.iv6
> -rw-r--r-- 1 root root   56 Nov 20 17:19 NR.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 NR.iv6
> -rw-r--r-- 1 root root   16 Nov 20 17:19 NU.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 NU.iv6
> -rw-r--r-- 1 root root  14K Nov 20 17:19 NZ.iv4
> -rw-r--r-- 1 root root  12K Nov 20 17:18 NZ.iv6
> -rw-r--r-- 1 root root  416 Nov 20 17:19 OM.iv4
> -rw-r--r-- 1 root root  544 Nov 20 17:18 OM.iv6
> -rw-r--r-- 1 root root 1.2K Nov 20 17:19 PA.iv4
> -rw-r--r-- 1 root root 2.3K Nov 20 17:18 PA.iv6
> -rw-r--r-- 1 root root 1.9K Nov 20 17:19 PE.iv4
> -rw-r--r-- 1 root root 3.4K Nov 20 17:18 PE.iv6
> -rw-r--r-- 1 root root  128 Nov 20 17:19 PF.iv4
> -rw-r--r-- 1 root root  192 Nov 20 17:18 PF.iv6
> -rw-r--r-- 1 root root  448 Nov 20 17:19 PG.iv4
> -rw-r--r-- 1 root root  704 Nov 20 17:18 PG.iv6
> -rw-r--r-- 1 root root 4.9K Nov 20 17:19 PH.iv4
> -rw-r--r-- 1 root root 5.3K Nov 20 17:18 PH.iv6
> -rw-r--r-- 1 root root 4.1K Nov 20 17:19 PK.iv4
> -rw-r--r-- 1 root root 5.0K Nov 20 17:18 PK.iv6
> -rw-r--r-- 1 root root  32K Nov 20 17:19 PL.iv4
> -rw-r--r-- 1 root root  27K Nov 20 17:18 PL.iv6
> -rw-r--r-- 1 root root   16 Nov 20 17:19 PM.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 PM.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 PN.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 PN.iv6
> -rw-r--r-- 1 root root 1.4K Nov 20 17:19 PR.iv4
> -rw-r--r-- 1 root root 1.2K Nov 20 17:18 PR.iv6
> -rw-r--r-- 1 root root 1.4K Nov 20 17:19 PS.iv4
> -rw-r--r-- 1 root root 1.2K Nov 20 17:18 PS.iv6
> -rw-r--r-- 1 root root 3.5K Nov 20 17:19 PT.iv4
> -rw-r--r-- 1 root root 3.1K Nov 20 17:18 PT.iv6
> -rw-r--r-- 1 root root   32 Nov 20 17:19 PW.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 PW.iv6
> -rw-r--r-- 1 root root  928 Nov 20 17:19 PY.iv4
> -rw-r--r-- 1 root root 2.6K Nov 20 17:18 PY.iv6
> -rw-r--r-- 1 root root  296 Nov 20 17:19 QA.iv4
> -rw-r--r-- 1 root root  448 Nov 20 17:18 QA.iv6
> -rw-r--r-- 1 root root  120 Nov 20 17:19 RE.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 RE.iv6
> -rw-r--r-- 1 root root  26K Nov 20 17:19 RO.iv4
> -rw-r--r-- 1 root root 8.4K Nov 20 17:18 RO.iv6
> -rw-r--r-- 1 root root 3.3K Nov 20 17:19 RS.iv4
> -rw-r--r-- 1 root root 3.1K Nov 20 17:18 RS.iv6
> -rw-r--r-- 1 root root  85K Nov 20 17:19 RU.iv4
> -rw-r--r-- 1 root root  76K Nov 20 17:18 RU.iv6
> -rw-r--r-- 1 root root  168 Nov 20 17:19 RW.iv4
> -rw-r--r-- 1 root root  256 Nov 20 17:18 RW.iv6
> -rw-r--r-- 1 root root 3.9K Nov 20 17:19 SA.iv4
> -rw-r--r-- 1 root root 2.9K Nov 20 17:18 SA.iv6
> -rw-r--r-- 1 root root   80 Nov 20 17:19 SB.iv4
> -rw-r--r-- 1 root root  192 Nov 20 17:18 SB.iv6
> -rw-r--r-- 1 root root 2.0K Nov 20 17:19 SC.iv4
> -rw-r--r-- 1 root root  736 Nov 20 17:18 SC.iv6
> -rw-r--r-- 1 root root  248 Nov 20 17:19 SD.iv4
> -rw-r--r-- 1 root root  288 Nov 20 17:18 SD.iv6
> -rw-r--r-- 1 root root  16K Nov 20 17:19 SE.iv4
> -rw-r--r-- 1 root root  25K Nov 20 17:18 SE.iv6
> -rw-r--r-- 1 root root  12K Nov 20 17:19 SG.iv4
> -rw-r--r-- 1 root root  13K Nov 20 17:18 SG.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 SH.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 SH.iv6
> -rw-r--r-- 1 root root 3.8K Nov 20 17:19 SI.iv4
> -rw-r--r-- 1 root root 4.4K Nov 20 17:18 SI.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 SJ.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 SJ.iv6
> -rw-r--r-- 1 root root 3.2K Nov 20 17:19 SK.iv4
> -rw-r--r-- 1 root root 4.1K Nov 20 17:18 SK.iv6
> -rw-r--r-- 1 root root  184 Nov 20 17:19 SL.iv4
> -rw-r--r-- 1 root root  224 Nov 20 17:18 SL.iv6
> -rw-r--r-- 1 root root  144 Nov 20 17:19 SM.iv4
> -rw-r--r-- 1 root root  320 Nov 20 17:18 SM.iv6
> -rw-r--r-- 1 root root  240 Nov 20 17:19 SN.iv4
> -rw-r--r-- 1 root root  288 Nov 20 17:18 SN.iv6
> -rw-r--r-- 1 root root  176 Nov 20 17:19 SO.iv4
> -rw-r--r-- 1 root root  384 Nov 20 17:18 SO.iv6
> -rw-r--r-- 1 root root   88 Nov 20 17:19 SR.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 SR.iv6
> -rw-r--r-- 1 root root  176 Nov 20 17:19 SS.iv4
> -rw-r--r-- 1 root root   96 Nov 20 17:18 SS.iv6
> -rw-r--r-- 1 root root   16 Nov 20 17:19 ST.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 ST.iv6
> -rw-r--r-- 1 root root  696 Nov 20 17:19 SV.iv4
> -rw-r--r-- 1 root root 1.3K Nov 20 17:18 SV.iv6
> -rw-r--r-- 1 root root  104 Nov 20 17:19 SX.iv4
> -rw-r--r-- 1 root root  224 Nov 20 17:18 SX.iv6
> -rw-r--r-- 1 root root 1.7K Nov 20 17:19 SY.iv4
> -rw-r--r-- 1 root root  832 Nov 20 17:18 SY.iv6
> -rw-r--r-- 1 root root  152 Nov 20 17:19 SZ.iv4
> -rw-r--r-- 1 root root  160 Nov 20 17:18 SZ.iv6
> -rw-r--r-- 1 root root   56 Nov 20 17:19 TC.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 TC.iv6
> -rw-r--r-- 1 root root  120 Nov 20 17:19 TD.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 TD.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 TF.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 TF.iv6
> -rw-r--r-- 1 root root  104 Nov 20 17:19 TG.iv4
> -rw-r--r-- 1 root root  160 Nov 20 17:18 TG.iv6
> -rw-r--r-- 1 root root 5.4K Nov 20 17:19 TH.iv4
> -rw-r--r-- 1 root root 5.6K Nov 20 17:18 TH.iv6
> -rw-r--r-- 1 root root  224 Nov 20 17:19 TJ.iv4
> -rw-r--r-- 1 root root  256 Nov 20 17:18 TJ.iv6
> -rw-r--r-- 1 root root    8 Nov 20 17:19 TK.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 TK.iv6
> -rw-r--r-- 1 root root  136 Nov 20 17:19 TL.iv4
> -rw-r--r-- 1 root root  224 Nov 20 17:18 TL.iv6
> -rw-r--r-- 1 root root   40 Nov 20 17:19 TM.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 TM.iv6
> -rw-r--r-- 1 root root  248 Nov 20 17:19 TN.iv4
> -rw-r--r-- 1 root root  288 Nov 20 17:18 TN.iv6
> -rw-r--r-- 1 root root   80 Nov 20 17:19 TO.iv4
> -rw-r--r-- 1 root root  128 Nov 20 17:18 TO.iv6
> -rw-r--r-- 1 root root  11K Nov 20 17:19 TR.iv4
> -rw-r--r-- 1 root root  16K Nov 20 17:18 TR.iv6
> -rw-r--r-- 1 root root  440 Nov 20 17:19 TT.iv4
> -rw-r--r-- 1 root root  416 Nov 20 17:18 TT.iv6
> -rw-r--r-- 1 root root    8 Nov 20 17:19 TV.iv4
> -rw-r--r-- 1 root root   64 Nov 20 17:18 TV.iv6
> -rw-r--r-- 1 root root 6.8K Nov 20 17:19 TW.iv4
> -rw-r--r-- 1 root root 9.8K Nov 20 17:18 TW.iv6
> -rw-r--r-- 1 root root  904 Nov 20 17:19 TZ.iv4
> -rw-r--r-- 1 root root 1.5K Nov 20 17:18 TZ.iv6
> -rw-r--r-- 1 root root  25K Nov 20 17:19 UA.iv4
> -rw-r--r-- 1 root root  18K Nov 20 17:18 UA.iv6
> -rw-r--r-- 1 root root  504 Nov 20 17:19 UG.iv4
> -rw-r--r-- 1 root root  704 Nov 20 17:18 UG.iv6
> -rw-r--r-- 1 root root    0 Nov 20 17:18 UM.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 UM.iv6
> -rw-r--r-- 1 root root 448K Nov 20 17:19 US.iv4
> -rw-r--r-- 1 root root 214K Nov 20 17:18 US.iv6
> -rw-r--r-- 1 root root  648 Nov 20 17:19 UY.iv4
> -rw-r--r-- 1 root root  928 Nov 20 17:18 UY.iv6
> -rw-r--r-- 1 root root  776 Nov 20 17:19 UZ.iv4
> -rw-r--r-- 1 root root  864 Nov 20 17:18 UZ.iv6
> -rw-r--r-- 1 root root   56 Nov 20 17:19 VA.iv4
> -rw-r--r-- 1 root root  160 Nov 20 17:18 VA.iv6
> -rw-r--r-- 1 root root   72 Nov 20 17:19 VC.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 VC.iv6
> -rw-r--r-- 1 root root 1.9K Nov 20 17:19 VE.iv4
> -rw-r--r-- 1 root root 3.3K Nov 20 17:18 VE.iv6
> -rw-r--r-- 1 root root  632 Nov 20 17:19 VG.iv4
> -rw-r--r-- 1 root root  448 Nov 20 17:18 VG.iv6
> -rw-r--r-- 1 root root  136 Nov 20 17:19 VI.iv4
> -rw-r--r-- 1 root root  160 Nov 20 17:18 VI.iv6
> -rw-r--r-- 1 root root 6.4K Nov 20 17:19 VN.iv4
> -rw-r--r-- 1 root root 7.9K Nov 20 17:18 VN.iv6
> -rw-r--r-- 1 root root  160 Nov 20 17:19 VU.iv4
> -rw-r--r-- 1 root root  256 Nov 20 17:18 VU.iv6
> -rw-r--r-- 1 root root   24 Nov 20 17:19 WF.iv4
> -rw-r--r-- 1 root root   32 Nov 20 17:18 WF.iv6
> -rw-r--r-- 1 root root  120 Nov 20 17:19 WS.iv4
> -rw-r--r-- 1 root root  256 Nov 20 17:18 WS.iv6
> -rw-r--r-- 1 root root  232 Nov 20 17:19 YE.iv4
> -rw-r--r-- 1 root root  192 Nov 20 17:18 YE.iv6
> -rw-r--r-- 1 root root   40 Nov 20 17:19 YT.iv4
> -rw-r--r-- 1 root root    0 Nov 20 17:18 YT.iv6
> -rw-r--r-- 1 root root  13K Nov 20 17:19 ZA.iv4
> -rw-r--r-- 1 root root  11K Nov 20 17:18 ZA.iv6
> -rw-r--r-- 1 root root  272 Nov 20 17:19 ZM.iv4
> -rw-r--r-- 1 root root  416 Nov 20 17:18 ZM.iv6
> -rw-r--r-- 1 root root  248 Nov 20 17:19 ZW.iv4
> -rw-r--r-- 1 root root  448 Nov 20 17:18 ZW.iv6

In my humble opinion, this location version is ready for being used in production. Simple tests based on location-based
firewall rules, but not the location filter itself did not raise any unexpected behaviour.

While upgrading to the mentioned Core 153 Build, I stumbled across some strange error messages, which were filed in #12537
(https://bugzilla.ipfire.org/show_bug.cgi?id=12537). Apart from this and two patches updating Tor and solving #12303, which
I will hand in in a few minutes, upcoming Core Update 153 looks good to me so far.

Thanks, and best regards,
Peter Müller

Re: Next steps of IPFire Location

[Peter Müller]

[-- Attachment #1: Type: text/plain, Size: 809 bytes --]

Hello *,

I just stumbled across a strange issue on my testing machine strongly 
reminding me of a problem with the xt_geoip module if we printed the 
location database contents non-planar:

For debugging and monitoring reasons, a NRPE job pinging ping.ipfire.org 
(which resolves to 81.3.27.38) is executed periodically. Since a few 
hours, this job fails due to ICMP packets to this IP address being 
dropped by the outgoing firewall engine.

Its policy is set to "drop", with a rule allowing ICMP traffic to DE. 
While "location lookup 81.3.27.38" correctly returns DE for the prefix 
31.8.0.0/18, it seems as the xt_geoip module did not get that and 
misclassifies this IP address.

Is somebody able to verify or falsify this issue on Core Development 
Build 153?

Thanks, and best regards,
Peter Müller

Re: Next steps of IPFire Location

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1005 bytes --]

Hi,

Yes, I can confirm this. The subnets returned are not unique.

-Michael

> On 22 Nov 2020, at 11:59, Peter Müller <peter.mueller(a)ipfire.org> wrote:
> 
> Hello *,
> 
> I just stumbled across a strange issue on my testing machine strongly reminding me of a problem with the xt_geoip module if we printed the location database contents non-planar:
> 
> For debugging and monitoring reasons, a NRPE job pinging ping.ipfire.org (which resolves to 81.3.27.38) is executed periodically. Since a few hours, this job fails due to ICMP packets to this IP address being dropped by the outgoing firewall engine.
> 
> Its policy is set to "drop", with a rule allowing ICMP traffic to DE. While "location lookup 81.3.27.38" correctly returns DE for the prefix 31.8.0.0/18, it seems as the xt_geoip module did not get that and misclassifies this IP address.
> 
> Is somebody able to verify or falsify this issue on Core Development Build 153?
> 
> Thanks, and best regards,
> Peter Müller

Re: Next steps of IPFire Location

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1875 bytes --]

Ladies and gentlemen,

After days and days of looking into this, and neglecting all the more important things I should be doing, I have updated libloc in the testing tree.

The good news is that I think that I have fixed the issue. I would like you all to check this for me if you could :)

The bad news is that the reason the output was incorrect was that the more complicated code path was not being used when it was required. This has been fixed now and it is actually fast enough I think. That again has to be tested.

If you all would repeat the last test with the updated version as soon as it finishes its build.

It will run for many many minutes, if not an hour. I want to know that figure. We will bring it down.

Best,
-Michael

> On 23 Nov 2020, at 11:16, Michael Tremer <michael.tremer(a)ipfire.org> wrote:
> 
> Hi,
> 
> Yes, I can confirm this. The subnets returned are not unique.
> 
> -Michael
> 
>> On 22 Nov 2020, at 11:59, Peter Müller <peter.mueller(a)ipfire.org> wrote:
>> 
>> Hello *,
>> 
>> I just stumbled across a strange issue on my testing machine strongly reminding me of a problem with the xt_geoip module if we printed the location database contents non-planar:
>> 
>> For debugging and monitoring reasons, a NRPE job pinging ping.ipfire.org (which resolves to 81.3.27.38) is executed periodically. Since a few hours, this job fails due to ICMP packets to this IP address being dropped by the outgoing firewall engine.
>> 
>> Its policy is set to "drop", with a rule allowing ICMP traffic to DE. While "location lookup 81.3.27.38" correctly returns DE for the prefix 31.8.0.0/18, it seems as the xt_geoip module did not get that and misclassifies this IP address.
>> 
>> Is somebody able to verify or falsify this issue on Core Development Build 153?
>> 
>> Thanks, and best regards,
>> Peter Müller
> 

Re: Next steps of IPFire Location

[Stefan Schantl]

[-- Attachment #1: Type: text/plain, Size: 2433 bytes --]

Hello Michael,

I've installed the latest experimental update on my productive IPFire
system (IPFire Mini Appliance) and performed the export test again.

Here are the results:

[root(a)gate ~]# cat /etc/system-release
IPFire 2.25 (x86_64) - core153 Development Build: next/7adacda0

[root(a)gate ~]# time location export --directory=/tmp --format=xt_geoip

real	1m38.759s
user	1m37.743s
sys	0m0.390s

Best regards,

-Stefan
> Ladies and gentlemen,
> 
> After days and days of looking into this, and neglecting all the more
> important things I should be doing, I have updated libloc in the
> testing tree.
> 
> The good news is that I think that I have fixed the issue. I would
> like you all to check this for me if you could :)
> 
> The bad news is that the reason the output was incorrect was that the
> more complicated code path was not being used when it was required.
> This has been fixed now and it is actually fast enough I think. That
> again has to be tested.
> 
> If you all would repeat the last test with the updated version as
> soon as it finishes its build.
> 
> It will run for many many minutes, if not an hour. I want to know
> that figure. We will bring it down.
> 
> Best,
> -Michael
> 
> > On 23 Nov 2020, at 11:16, Michael Tremer <michael.tremer(a)ipfire.org
> > > wrote:
> > 
> > Hi,
> > 
> > Yes, I can confirm this. The subnets returned are not unique.
> > 
> > -Michael
> > 
> > > On 22 Nov 2020, at 11:59, Peter Müller <peter.mueller(a)ipfire.org>
> > > wrote:
> > > 
> > > Hello *,
> > > 
> > > I just stumbled across a strange issue on my testing machine
> > > strongly reminding me of a problem with the xt_geoip module if we
> > > printed the location database contents non-planar:
> > > 
> > > For debugging and monitoring reasons, a NRPE job pinging
> > > ping.ipfire.org (which resolves to 81.3.27.38) is executed
> > > periodically. Since a few hours, this job fails due to ICMP
> > > packets to this IP address being dropped by the outgoing firewall
> > > engine.
> > > 
> > > Its policy is set to "drop", with a rule allowing ICMP traffic to
> > > DE. While "location lookup 81.3.27.38" correctly returns DE for
> > > the prefix 31.8.0.0/18, it seems as the xt_geoip module did not
> > > get that and misclassifies this IP address.
> > > 
> > > Is somebody able to verify or falsify this issue on Core
> > > Development Build 153?
> > > 
> > > Thanks, and best regards,
> > > Peter Müller

Re: Next steps of IPFire Location

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 2943 bytes --]

Hello,

I have just pushed the required changes to fix the segmentation fault on 32 bit machines. That was unfortunately caused by an integer underflow.

I am not sure if anyone is running a 32 bit system in production, but I would like to hear how well this is performing on those.

Best,
-Michael

> On 27 Nov 2020, at 08:03, Stefan Schantl <stefan.schantl(a)ipfire.org> wrote:
> 
> Hello Michael,
> 
> I've installed the latest experimental update on my productive IPFire
> system (IPFire Mini Appliance) and performed the export test again.
> 
> Here are the results:
> 
> [root(a)gate ~]# cat /etc/system-release
> IPFire 2.25 (x86_64) - core153 Development Build: next/7adacda0
> 
> [root(a)gate ~]# time location export --directory=/tmp --format=xt_geoip
> 
> real	1m38.759s
> user	1m37.743s
> sys	0m0.390s
> 
> Best regards,
> 
> -Stefan
>> Ladies and gentlemen,
>> 
>> After days and days of looking into this, and neglecting all the more
>> important things I should be doing, I have updated libloc in the
>> testing tree.
>> 
>> The good news is that I think that I have fixed the issue. I would
>> like you all to check this for me if you could :)
>> 
>> The bad news is that the reason the output was incorrect was that the
>> more complicated code path was not being used when it was required.
>> This has been fixed now and it is actually fast enough I think. That
>> again has to be tested.
>> 
>> If you all would repeat the last test with the updated version as
>> soon as it finishes its build.
>> 
>> It will run for many many minutes, if not an hour. I want to know
>> that figure. We will bring it down.
>> 
>> Best,
>> -Michael
>> 
>>> On 23 Nov 2020, at 11:16, Michael Tremer <michael.tremer(a)ipfire.org
>>>> wrote:
>>> 
>>> Hi,
>>> 
>>> Yes, I can confirm this. The subnets returned are not unique.
>>> 
>>> -Michael
>>> 
>>>> On 22 Nov 2020, at 11:59, Peter Müller <peter.mueller(a)ipfire.org>
>>>> wrote:
>>>> 
>>>> Hello *,
>>>> 
>>>> I just stumbled across a strange issue on my testing machine
>>>> strongly reminding me of a problem with the xt_geoip module if we
>>>> printed the location database contents non-planar:
>>>> 
>>>> For debugging and monitoring reasons, a NRPE job pinging
>>>> ping.ipfire.org (which resolves to 81.3.27.38) is executed
>>>> periodically. Since a few hours, this job fails due to ICMP
>>>> packets to this IP address being dropped by the outgoing firewall
>>>> engine.
>>>> 
>>>> Its policy is set to "drop", with a rule allowing ICMP traffic to
>>>> DE. While "location lookup 81.3.27.38" correctly returns DE for
>>>> the prefix 31.8.0.0/18, it seems as the xt_geoip module did not
>>>> get that and misclassifies this IP address.
>>>> 
>>>> Is somebody able to verify or falsify this issue on Core
>>>> Development Build 153?
>>>> 
>>>> Thanks, and best regards,
>>>> Peter Müller
> 

libloc output for xt_geoip is fine on Core Update 153 Development Build: next/e8ecc81a (was: Re: Next steps of IPFire Location)

[Peter Müller]

[-- Attachment #1: Type: text/plain, Size: 1140 bytes --]

Hello Michael, hello *,

after having installed Core Update 153 Development Build: next/e8ecc81a on my testing machine and
rebooting, I am glad to finally confirm the libloc version included into it producing the correct
and desired output for xt_geoip within a reasonable amount of time:

> [root(a)maverick ~]# time location export --directory=tmp --format=xt_geoip
> 
> real	0m48.298s
> user	0m46.938s
> sys	0m0.301s

CPU is an Intel N3150, the system was under constant albeit medium load while executing this.

The generated IPv4 networks for DE look fine as they contain no apparent overlapping entries, while
all of them are ordered ascending. After reloading the updating procedure by running

> bash -x /usr/local/bin/update-location-database

pinging ping.ipfire.org (which is allowed by an outgoing firewall rule for destination country DE)
works again. Yay.

To conclude, libloc now finally seems to be ready for production and the more accurate database version
(which we have to generate and bake into Core Update 153, yet) - at least from my point of view.

Thanks, and best regards,
Peter Müller

Re: Next steps of IPFire Location

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 3703 bytes --]

Thank you for all your feedback. It helped a lot.

Or rather… It would have if Arne didn’t find that this whole algorithm doesn’t work :)

It simply does not do what we expect it to do and after my fix this takes a long time again.

I hope that I will find some time this week to improve the implementation further and will get back to you all very soon :)

Best,
-Michael

> On 22 Nov 2020, at 20:06, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
> 
> Dear All,
> 
> 
> I have the results now for the location testing on my Intel(R) Celeron(R) CPU J1900 @ 1.99GHz production box.
> 
> Stable
> real    0m37.240s
> user    0m37.086s
> sys    0m0.070s
> 
> 
> Unstable
> real    0m25.827s
> user    0m25.568s
> sys    0m0.123s
> 
> 
> Regards,
> 
> Adolf.
> 
> On 19/11/2020 18:48, Adolf Belka wrote:
>> I have tested it out on my IPFire virtual machine test bed.
>> 
>> I got between 4.8 and 5 secs.
>> 
>> The computer is an i5-8400 CPU @ 2.80GHz
>> 
>> I will also be testing it out on my production box which is a Intel(R) Celeron(R) CPU J1900 @ 1.99GHz but I have to prepare for that as I will need to re-install Core152 after carrying out the test. Will email the results when I have them.
>> 
>> Regards,
>> Adolf.
>> 
>> 
>> On 19/11/2020 14:10, Michael Tremer wrote:
>>> I managed to export the database on my IPFire Mini Appliance in about one minute:
>>> 
>>> [root(a)fw01 libloc]# time location export --directory=tmp --format=xt_geoip
>>> 
>>> real    1m3.423s
>>> user    1m1.470s
>>> sys     0m1.009s
>>> 
>>> The system was under a little bit of load due to some network activity, but I am generally quite happy with this.
>>> 
>>> I added some more fine-tuning and could decrease the export time on my Debian test machine by another 40% to around six seconds.
>>> 
>>> -Michael
>>> 
>>>> On 18 Nov 2020, at 19:26, Michael Tremer <michael.tremer(a)ipfire.org> wrote:
>>>> 
>>>> Hello,
>>>> 
>>>> Since there are now so many people involved in this project, I would like to send a little email to report what has happened and what the next steps are going to be…
>>>> 
>>>> I have spent (unfortunately) a lot of time to add the ability that we can “flatten the tree” when we export it. That means that no network will overlap with another one and we do not need to care about any orders of iptables rules being added.
>>>> 
>>>> That was quite a slow process in Python and since IPFire has to run on small hardware it needed to be ported into C. The tree can now be exported in about 10 seconds on my development box which is running an Intel Xeon E5-2630 processor.
>>>> 
>>>> I hope that we can reach acceptable times of only a few minutes on the slowest systems and way under a minute on an average system. To find out about that, I need you help:
>>>> 
>>>> I just pushed all changes into the next tree and would everyone who can to install that and report how long this command runs:
>>>> 
>>>>   mkdir tmp
>>>>   time location export --directory=tmp --format=xt_geoip
>>>> 
>>>> It would also be great if you could all check the output if this is still correct. I have done what I could, but I want to have an extra pair of eyes if possible.
>>>> 
>>>> If this works well, and no more regressions are being found, I will tag this release and we will close Core Update 153.
>>>> 
>>>> We will then roll out all recent changes that make the database better, but had to be held back because the tree needs to be flattened for most use-cases now. All older clients will then no longer receive an updated database any more.
>>>> 
>>>> Happy testing.
>>>> 
>>>> Best,
>>>> -Michael
>>> 

Re: Next steps of IPFire Location

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 2811 bytes --]

Hello Arne,

Thank you for spotting this.

I have fixed the issue with some of the networks not being sorted correctly. Since this has affected performance slightly, the code has now become slightly faster again.

Regarding the 32 bit issue: This is a pain to debug now because I do not have a working 32 bit build environment with a debugger. I am compiling this now and I will work on it tomorrow.

Your export of A1 was incorrect because it wasn’t exported at all. That must have been old data because I forgot to copy the flags, too.

Best,
-Michael

> On 26 Nov 2020, at 07:51, Arne Fitzenreiter <arne_f(a)ipfire.org> wrote:
> 
> Bad news with current nightly. The export segfault on 32bit
> 
> Also the exported data on RPi3 was still not in
> the correct order. In my export the fourth entry of A1.ipv4 is lower than the third.
> 
> Arne
> 
> Am 2020-11-25 21:24, schrieb Michael Tremer:
>> Ladies and gentlemen,
>> After days and days of looking into this, and neglecting all the more
>> important things I should be doing, I have updated libloc in the
>> testing tree.
>> The good news is that I think that I have fixed the issue. I would
>> like you all to check this for me if you could :)
>> The bad news is that the reason the output was incorrect was that the
>> more complicated code path was not being used when it was required.
>> This has been fixed now and it is actually fast enough I think. That
>> again has to be tested.
>> If you all would repeat the last test with the updated version as soon
>> as it finishes its build.
>> It will run for many many minutes, if not an hour. I want to know that
>> figure. We will bring it down.
>> Best,
>> -Michael
>>> On 23 Nov 2020, at 11:16, Michael Tremer <michael.tremer(a)ipfire.org> wrote:
>>> Hi,
>>> Yes, I can confirm this. The subnets returned are not unique.
>>> -Michael
>>>> On 22 Nov 2020, at 11:59, Peter Müller <peter.mueller(a)ipfire.org> wrote:
>>>> Hello *,
>>>> I just stumbled across a strange issue on my testing machine strongly reminding me of a problem with the xt_geoip module if we printed the location database contents non-planar:
>>>> For debugging and monitoring reasons, a NRPE job pinging ping.ipfire.org (which resolves to 81.3.27.38) is executed periodically. Since a few hours, this job fails due to ICMP packets to this IP address being dropped by the outgoing firewall engine.
>>>> Its policy is set to "drop", with a rule allowing ICMP traffic to DE. While "location lookup 81.3.27.38" correctly returns DE for the prefix 31.8.0.0/18, it seems as the xt_geoip module did not get that and misclassifies this IP address.
>>>> Is somebody able to verify or falsify this issue on Core Development Build 153?
>>>> Thanks, and best regards,
>>>> Peter Müller