aboutsummaryrefslogtreecommitdiffstats
path: root/doc/mmdbresolve.adoc
blob: 44f5e9c5bcd782b9145e7c3257d404754fa2e5c2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
include::../docbook/attributes.adoc[]
= mmdbresolve(1)
:doctype: manpage
:stylesheet: ws.css
:linkcss:
:copycss: ../docbook/{stylesheet}

== NAME

mmdbresolve - Read IPv4 and IPv6 addresses and print their IP geolocation information.

== SYNOPSIS

[manarg]
*mmdbresolve*
*-f <dbfile>*
[ *-f <dbfile>* ]
__...__

== DESCRIPTION

*mmdbresolve* reads IPv4 and IPv6 addresses on stdin and prints their IP geolocation information
on stdout. Each input line must contain exactly one address. Output is in INI format, with a section
delimiter named after the query address followed by a set of "key: value" pairs. A comment
beginning with "# End" is appended to each section.

At startup an "[init]" section is printed that shows the status of each datbase and of mmdbresolve
itself.

== OPTIONS

-f::
+
--
Path to a MaxMind Database file. Multiple databases may be specified.
--

== EXAMPLES

To resolve a single address:

    echo 4.4.4.4 | mmdbresolve -f /usr/share/GeoIP/GeoLite2-City.mmdb

.Example output
    [init]
    db.0.path: /usr/share/GeoIP/GeoLite2-City.mmdb
    db.0.status: OK
    mmdbresolve.status: true
    # End init
    [4.4.4.4]
    # GeoLite2-City
    country.iso_code: US
    country.names.en: United States
    location.latitude: 37.751000
    location.longitude: -97.822000
    # End 4.4.4.4

== SEE ALSO

xref:wireshark.html[wireshark](1), xref:tshark.html[tshark](1)

== NOTES

*mmdbresolve* is part of the *Wireshark* distribution. The latest version
of *Wireshark* can be found at https://www.wireshark.org.

HTML versions of the Wireshark project man pages are available at
https://www.wireshark.org/docs/man-pages.

== AUTHORS

.Original Author
[%hardbreaks]
Gerald Combs <gerald[AT]wireshark.org>