How to compile Tshark to make GeoIP work

asked 2020-04-11 15:29:27 +0000

GB_123 gravatar image

updated 2020-04-11 15:53:19 +0000

grahamb gravatar image

Hi

If I install tshark via package I can use GeoIP without any issue.

When I compile tshark this does not work.

I know that the mmdv files are correct, I have also used the mmdbresolve tool to verify.

The following output shows the configuration of tshark;

[email protected]:~$ tshark -G folders
Temp:                   /tmp
Personal configuration: /home/graham/.config/wireshark
Global configuration:   /usr/local/share/wireshark
System:                 /etc
Program:                /usr/local/bin
Personal Plugins:       /home/graham/.local/lib/wireshark/plugins/2.6
Global Plugins:         /usr/local/lib/wireshark/plugins/2.6
Extcap path:            /usr/local/lib/wireshark/extcap
MaxMind database path:  /usr/share/GeoIP
MaxMind database path:  /var/lib/GeoIP
[email protected]:~$ tshark -v
TShark (Wireshark) 2.6.16 (v2.6.16)

Copyright 1998-2020 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later <http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, without POSIX capabilities, without libnl, with
GLib 2.56.4, with zlib 1.2.11, without SMI, without c-ares, without Lua, without
GnuTLS, with Gcrypt 1.8.1, without Kerberos, with MaxMind DB resolver, without
nghttp2, without LZ4, without Snappy, without libxml2.

Running on Linux 4.15.0-96-generic, with Intel(R) Core(TM) i5-7Y54 CPU @ 1.20GHz
(with SSE4.2), with 1993 MB of physical memory, with locale en_US.UTF-8, with
libpcap version 1.8.1, with Gcrypt 1.8.1, with zlib 1.2.11, binary plugins
supported (13 loaded).

Built using gcc 7.5.0.
[email protected]:~$

I have also used the latest 3.2.2 which also didn't work.

any ideas please?

many thanks

edit retag flag offensive close merge delete

Comments

Hi

One thing that I noticed, when install from package there are lots of libraries, however when I compile this, a lot of the libraries are not included. Would anyone know what is mandatory for GeoIP ?

Also just to note, I'm using Ubuntu 16.04 and 18.04.

Many thanks

GB_123 gravatar imageGB_123 ( 2020-04-12 16:39:24 +0000 )edit