Wireshark does not ship with any GeoIP2 or GeoLite2 databases, so you have to download them yourself. To see if your copy of Wireshark supports MaxMind's GeoIP2 and GeoLite2, go to Help→About Wireshark and look for "MaxMind DB resolver" in the "Compiled with" paragraph. The GeoLite2 version of the AS number database is the only version of that database there is no for-purchase GeoIP2 version. The for-purchase GeoIP2 City and GeoIP2 Country databases are more accurate than the free GeoLite2 City and GeoLite2 Country databases free versions of the GeoIP2 Region, GeoIP2 Organization, and GeoIP2 ISP databases are not available. Wireshark 2.6 and up can use MaxMind's GeoIP2 (purchase) and GeoLite2 (free) databases to look up the city, country, AS number, and other information for an IP address. MaxMind produces databases and software for geolocation.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |