10.10. MaxMind Database Paths
Prev | Chapter 10. Customizing Wireshark | Next

## 10.10. MaxMind Database Paths

If your copy of Wireshark supports MaxMind’s MaxMindDB library, you can use their databases to match IP addresses to countries, cites, autonomous system numbers, and other bits of information. Some databases are available at no cost, while others require a licensing fee. See the MaxMind web site for more information.

This table is handled by an Section 10.7, “User Table” with the following fields.

Database pathname
  This specifies a directory containing MaxMind data files. Any files ending with .mmdb will be automatically loaded.

The locations for your data files are up to you, but `/usr/share/GeoIP` and `/var/lib/GeoIP` are common on Linux and `C:\ProgramData\GeoIP`, `C:\Program Files\Wireshark\GeoIP` might be good choices on Windows.

Previous versions of Wireshark supported MaxMind’s original GeoIP Legacy database format. They were configured similar to MaxMindDB files above, except GeoIP files must begin with Geo and end with .dat. They are no longer supported and MaxMind stopped distributing GeoLite Legacy databases in April 2018.

Prev | Up | Next
10.9. ESS Category Attributes | Home | 10.11. IKEv2 decryption table