This is our old Q&A Site. Please post any new questions and answers at

Hi, How do I use the maxmind Geo IP databases when using tshark, using the terminal (or how do tell tshark to refer to the downloaded database files)? There is no gui on the system so I cannot add using wireshark.

Thanks, qwerfdsa

asked 04 Mar '13, 18:54

qwerfdsa's gravatar image

accept rate: 0%

You will need to have a ~/.wireshark/geoip_db_paths file; it should contain a line giving the absolute path name of the GeoIP database directory, in double-quotes. For example, mine has the line


because they're stored in a directory named GeoIP under my home directory.

permanent link

answered 04 Mar '13, 21:54

Guy%20Harris's gravatar image

Guy Harris ♦♦
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 04 Mar '13, 18:54

question was seen: 3,590 times

last updated: 26 Aug '13, 15:40

p​o​w​e​r​e​d by O​S​Q​A