|MMDBRESOLVE(1)||The Wireshark Network Analyzer||MMDBRESOLVE(1)|
mmdbresolve - Read IPv4 and IPv6 addresses and print their IP geolocation information.
mmdbresolve -f <dbfile> [ -f <dbfile> ] ...
mmdbresolve reads IPv4 and IPv6 addresses on stdin and prints their IP geolocation information on stdout. Each input line must contain exactly one address. Output is in INI format, with a section delimiter named after the query address followed by a set of "key: value" pairs. A comment beginning with "# End" is appended to each section.
At startup an "[init]" section is printed that shows the status of each datbase and of mmdbresolve itself.
- Path to a MaxMind Database file. Multiple databases may be specified.
To resolve a single address:
echo 220.127.116.11 | mmdbresolve -f /usr/share/GeoIP/GeoLite2-City.mmdb
[init] db.0.path: /usr/share/GeoIP/GeoLite2-City.mmdb db.0.status: OK mmdbresolve.status: true # End init [18.104.22.168] # GeoLite2-City country.iso_code: US country.names.en: United States location.latitude: 37.751000 location.longitude: -97.822000 # End 22.214.171.124
mmdbresolve is part of the Wireshark distribution. The latest version of Wireshark can be found at <https://www.wireshark.org>.
HTML versions of the Wireshark project man pages are available at: <https://www.wireshark.org/docs/man-pages>.
Original Author --------------- Gerald Combs <gerald[AT]wireshark.org>