how do I use the maxmind Geo IP databases when using tshark?

Question

Hi, How do I use the maxmind Geo IP databases when using tshark, using the terminal (or how do tell tshark to refer to the downloaded database files)? There is no gui on the system so I cannot add using wireshark.

Thanks, qwerfdsa

Accepted Answer

You will need to have a ~/.wireshark/geoip_db_paths file; it should contain a line giving the absolute path name of the GeoIP database directory, in double-quotes. For example, mine has the line

"/Users/gharris/GeoIP"

because they're stored in a directory named GeoIP under my home directory.