Hi,

It's documented under template functions at http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.6-guides/en/syslog-ng-ose-v3.6-guide-admin/html-single/index.html#reference-template-functions It's usually available in a separate subpackage to reduce the number of external dependencies of the syslog-ng core package.

List archives are available at https://lists.balabit.hu/pipermail/syslog-ng/ (actually it's linked from the info page under each e-mail...).

Bye,

Peter Czanik (CzP) <peter.czanik@balabit.com>
BalaBit IT Security / syslog-ng upstream
http://czanik.blogs.balabit.com/
https://twitter.com/PCzanik

On Fri, Feb 20, 2015 at 10:52 AM, <jrhendri@roadrunner.com> wrote:
Hi,

  I would like to understand how the geoip module works, but cannot find any documentation (or really - any relevant source code so far).

  I assume it must use some downloaded database (or else it would seem like it would kill a local resolver) but cannot find anything describing it.

  Is anyone using it in reasonably high-performance environments? (like 5000+ events per second)

  Also, as I was looking for info, I cannot access the lists.balabit.hu archives (maybe I am *way* behind time, is this still maintained anywhere?)

Thanks!
Jim

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq