|MMDBRESOLVE(1)||The Wireshark Network Analyzer||MMDBRESOLVE(1)|
NAME¶mmdbresolve - Read IPv4 and IPv6 addresses and print their IP geolocation information.
SYNOPSIS¶mmdbresolve -f <dbfile> [ -f <dbfile> ] ...
DESCRIPTION¶mmdbresolve reads IPv4 and IPv6 addresses on stdin and prints their IP geolocation information on stdout. Each input line must contain exactly one address. Output is in INI format, with a section delimiter named after the query address followed by a set of "key: value" pairs. A comment beginning with "# End" is appended to each section.
At startup an "[init]" section is printed that shows the status of each datbase and of mmdbresolve itself.
- Path to a MaxMind Database file. Multiple databases may be specified.
EXAMPLES¶To resolve a single address:
echo 184.108.40.206 | mmdbresolve -f /usr/share/GeoIP/GeoLite2-City.mmdb Example output: [init] db.0.path: /usr/share/GeoIP/GeoLite2-City.mmdb db.0.status: OK mmdbresolve.status: true # End init [220.127.116.11] # GeoLite2-City country.iso_code: US country.names.en: United States location.latitude: 37.751000 location.longitude: -97.822000 # End 18.104.22.168
SEE ALSO¶wireshark(1), tshark(1)
NOTES¶mmdbresolve is part of the Wireshark distribution. The latest version of Wireshark can be found at <https://www.wireshark.org>.
HTML versions of the Wireshark project man pages are available at: <https://www.wireshark.org/docs/man-pages>.
Original Author --------------- Gerald Combs <gerald[AT]wireshark.org>