You should see some geolocation information in either source or destination IP.

Select any packet and expand its IP header.

Once you see the packets for the site, stop capturing.

Wireshark will automatically load all files ending with that extension. Do not forget that files extension must be “.mmdb”. Select your directory where your files are stored. Then on the right, at the bottom of the window, there is an edit button which lets us to add MaxMind databases. We click on 'Name Resolution' in the left pane. Step-2: Load MaxMind Database into Wiresark Open Wireshark and go to Edit → Preferences. In the end, they must look like below in the directory.Īdding MaxMind Databases Path to Wireshark Step-1: Access Wireshark Settings Thus, we need to unzip them into the same directory. With a few lines of code, you can get geolocation in your application too.Ĭreate a directory and download the compressed (tar extension) files there. MaxMind recommends using official client libraries to query their databases. These databases can be used with Python, C#, Node, PHP and Ruby as well. Since Wireshark supports only mmdb format, we will download ZIP files which contain mmdb files. Step-2: Download MaxMind ZIP Files in mmdb format

Wireshark exclude ip