Wireshark-users: Re: [Wireshark-users] Request - how to use Geo location of IPv4 address

From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Tue, 06 Dec 2011 08:31:41 -0800
On 12/6/11 8:11 AM, W T wrote:
> Hello,
> 
> I am monitoring  video applications and see lot of IPv4 address in the
> conversation window.
> 
> Earlier, I did internet search and learn that using wireshark we can see
> the IPv4 address location mapped to the geographical locations.
> 
> How do I use that? How do i see the list of IPv4 address that i see in
> the conversation window mapped to the geographical location in the map.

You need to download one or more of the MaxMind GeoIP databases,
uncompress them and tell Wireshark where they are. A full description of
the process can be found on the wiki at

http://wiki.wireshark.org/HowToUseGeoIP