1MMDBRESOLVE(1) The Wireshark Network Analyzer MMDBRESOLVE(1)
2
3
4
6 mmdbresolve - Read IPv4 and IPv6 addresses and print their IP
7 geolocation information.
8
10 mmdbresolve -f <dbfile> [ -f <dbfile> ] ...
11
13 mmdbresolve reads IPv4 and IPv6 addresses on stdin and prints their IP
14 geolocation information on stdout. Each input line must contain exactly
15 one address. Output is in INI format, with a section delimiter named
16 after the query address followed by a set of "key: value" pairs. A
17 comment beginning with "# End" is appended to each section.
18
19 At startup an "[init]" section is printed that shows the status of each
20 datbase and of mmdbresolve itself.
21
23 -f Path to a MaxMind Database file. Multiple databases may be
24 specified.
25
27 To resolve a single address:
28
29 echo 4.4.4.4 | mmdbresolve -f /usr/share/GeoIP/GeoLite2-City.mmdb
30
31 Example output:
32 [init]
33 db.0.path: /usr/share/GeoIP/GeoLite2-City.mmdb
34 db.0.status: OK
35 mmdbresolve.status: true
36 # End init
37 [4.4.4.4]
38 # GeoLite2-City
39 country.iso_code: US
40 country.names.en: United States
41 location.latitude: 37.751000
42 location.longitude: -97.822000
43 # End 4.4.4.4
44
46 wireshark(1), tshark(1)
47
49 mmdbresolve is part of the Wireshark distribution. The latest version
50 of Wireshark can be found at <https://www.wireshark.org>.
51
52 HTML versions of the Wireshark project man pages are available at:
53 <https://www.wireshark.org/docs/man-pages>.
54
56 Original Author
57 ---------------
58 Gerald Combs <gerald[AT]wireshark.org>
59
60
61
623.2.3 2020-04-13 MMDBRESOLVE(1)