Ask Your Question

How to determine geolocation of access point based on wireshark capture

asked 2021-08-24 14:08:10 +0000

sivakumar28 gravatar image

Hi All,

How to i determine geolocation of access point based on Wireshark capture. Is there way to find out from the pcap capture . Kindly advise. Thanks.

edit retag flag offensive close merge delete

3 Answers

Sort by ยป oldest newest most voted

answered 2021-08-24 15:10:21 +0000

grahamb gravatar image

There's nothing in Wireshark itself, but SSIDs and MAC addresses can be used to look an AP up in a database. See the Wikipedia page on WiFi Positioning System.

edit flag offensive delete link more


or sites like WiGLE

Jaap gravatar imageJaap ( 2021-08-24 17:06:52 +0000 )edit

answered 2021-08-24 15:19:20 +0000

Chuckc gravatar image

If the capture includes a public IP address for the access point, try GeoIP:
Wireshark Wiki: How To Use GeoIP With Wireshark
GeoIP Mapping in Wireshark

edit flag offensive delete link more

answered 2021-08-24 17:08:40 +0000

BigFatCat gravatar image

You can get a general area of the geolocation with the AP ISP gateway address. It is the best interest of the ISP for the gateway to be nearby to avoid latency and throughput issues. The ISP gateway should be nearby and there are multiple tools like What is my IP that you can help pinpoint the city.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2021-08-24 14:08:10 +0000

Seen: 403 times

Last updated: Aug 24 '21