GeoIP processor warnings



I updated the Maxmind database (City Lite). It seems, that after that the GeoIP plugin throws exceptions when encountering internal (10.x.x.x) addresses:

2017-03-14T10:32:13.176+00:00 WARN  [ProcessBuffer] Unable to process event MessageEvent{raw=null, message=null, messages=null}, sequence 144912204
java.lang.InternalError: a fault occurred in a recent unsafe memory access operation in compiled Java code
        at com.maxmind.db.Decoder$Type.get( ~[?:?]
        at com.maxmind.db.Decoder.decode( ~[?:?]
        at com.maxmind.db.Decoder.decode( ~[?:?]
        at com.maxmind.db.Reader.resolveDataPointer( ~[?:?]
        at com.maxmind.db.Reader.get( ~[?:?]
        at com.maxmind.geoip2.DatabaseReader.get( ~[?:?]
        at ~[?:?]
        at ~[?:?]
        at ~[?:?]
        at ~[?:?]
        at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.handleMessage( ~[graylog.jar:?]
        at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.dispatchMessage( ~[graylog.jar:?]
        at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent( ~[graylog.jar:?]
        at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent( ~[graylog.jar:?]
        at [graylog.jar:?]
        at com.codahale.metrics.InstrumentedThreadFactory$ [graylog.jar:?]
        at [?:1.8.0_121]

(Jochen) #2

Does the exception occur every time a private IP address (such as,, or is being processed?

It looks like an error in the GeoIP library Graylog is using, so I’m not sure there’s much we can do about it.


I have not really tested properly, I cannot say. At the moment there are more pressing issues, so I doubt I’ll look at it very soon.