Using GeoIP to look up physical locations of the IP address
Wireshark 1.1.2 and the higher versions can use GeoIP (commercial version) and GeoLite (free version) databases to look up the city, country, AS number, and other information for an IP address discovered by Wireshark.
Getting ready
Go to the following website: http://dev.maxmind.com/geoip/geolite.
For IPv4, download the following files (the binaries):
GeoLite Country
GeoLite City
GeoLite ASN
For IPv6, download the following files:
GeoLite Country (IPv6)
GeoLite City (IPv6)
GeoLite ASN (IPv6)
Tip
Autonomous System (AS) is a term used in Exterior Gateway Protocols (EGPs), for identifying all routers under the control of the same network operator. When you connect to the Internet through two different Internet Service Providers (ISPs), you will get your own AS, while the two ISPs have their ASe While configuring connectivity to the Internet with two different Internet Service Providers (ISPs), ASs are configured along with an EGP routing protocol...
