Why is geolocation not working
I have all three MaxMind databases (Country, City, ASN) downloaded and unzipped into a folder I named MaxMind. I went to wireshark preferences and clicked name resolution. Then I clicked on the edit button for MaxMind database directories and added the file path of the folder that contains the databases. I have checked the file path and it is correct but wireshark still does resolve any location. If I go the wireshark Statistics tab, then select endpoints, and then select the IPv4 tab there is no location data displayed. Anyone have an Idea why this is? Thanks
What's the status of the IPv4 protocol dissector preference for geolocation? Is it on?
You can test outside of
wiresharkusingmmdbresolve(man page).If that is working properly, can you update the question with output of
wireshark -v.Where is the "IPv4 protocol dissector preference for geolocation" option located? I don't see it in preferences menu or the statistics menu.
Chuckc When I use mmdbresolve at the cmd prompt as shown by the example I get the following. 'mmdbresolve' is not recognized as an internal or external command, operable program or batch file.
You'll likely need to either
cdinto the Wireshark directory or use the full path to mmdbresolve, i.e.C:\Program Files\Wireshark\mmdbresolve.exe.