Section: The Wireshark Network Analyzer (1)
mmdbresolve - Read IPv4 and IPv6 addresses and print their IP geolocation information.
[ -f <dbfile>
reads IPv4 and IPv6 addresses on stdin and prints their IP
on stdout. Each input line must contain exactly one address. Output is in INI
format, with a section
delimiter named after the query address followed by a set of ``key: value'' pairs. A comment
beginning with ``# End'' is appended to each section.
At startup an ``[init]'' section is printed that shows the status of each datbase and of mmdbresolve
Path to a MaxMind Database file. Multiple databases may be specified.
To resolve a single address:
echo 126.96.36.199 | mmdbresolve -f /usr/share/GeoIP/GeoLite2-City.mmdb
# End init
country.names.en: United States
# End 188.8.131.52
is part of the Wireshark
distribution. The latest version
can be found at <https://www.wireshark.org
HTML versions of the Wireshark project man pages are available at:
Gerald Combs <gerald[AT]wireshark.org>