Would like to use IP GeoLocation capability in wireshark. I do not see it in 3.6.2 that I'm running on ubuntu 22.04. Is there a newer version for ubuntu or do I need to install a package on my current 3.6.2 wireshark?
thanks
A few years ago MaxMind made it difficult for Linux distributions to separately package the necessary database files. Distributions do continue to ship the last version with a redistribution friendly license from 2019: https://packages.ubuntu.com/focal/geo...
MaxMind provides a few ways of updating through them: https://github.com/maxmind/geoipupdate https://packages.ubuntu.com/focal/geo...
Your Wireshark version is capable of showing IP geolocation, if you set it up.
Go look at the Preferences, on the name resolution page. There's where you give it the MaxMind DB path. These database files you have to get yourself.
Then in the Preferences for the IPv4 protocol, you enable IP geolocation, and the same for IPv6.
If you do want a newer Wireshark release, there's a PPA for that. But it requires the same configurations.
Asked: 2024-06-11 13:22:19 +0000
Seen: 231 times
Last updated: Jun 12
