As we know, Wireshark has the capability to plot ip addresses on the world map if we configured it with GEOIP database files. It does shows the ip addresses on the map when I click on Statistics->Endpoints->IPv4->MAP, but it does not show country names for the specific ip addresses which it has resolved successfully(I can see the exact country names in the country column of IPv4 tab), why doesn't it show that on the map too? Can I make it in Wireshark and how?
asked 14 Sep '13, 08:19
There are still some problems regarding GeoIP lookups, being tracked as Bug 4030.
In this case, it's likely that you have both the IPv4 and IPv6 GeoIP databases in the same directory. If you move the IPv6 database files to another directory, then IPv4 lookups should work correctly. If you later want to map IPv6 addresses, then move the IPv6 database files back into your GeoIP directory and move the IPv4 database files to another directory.
answered 16 Sep '13, 07:49