mmdbresolve - Man Page

Read IPv4 and IPv6 addresses and print their IP geolocation information.


mmdbresolve -f <dbfile>-f <dbfile> ] ...


mmdbresolve reads IPv4 and IPv6 addresses on stdin and prints their IP geolocation information on stdout. Each input line must contain exactly one address. Output is in INI format, with a section delimiter named after the query address followed by a set of “key: value” pairs. A comment beginning with “# End” is appended to each section.

At startup an “[init]” section is printed that shows the status of each datbase and of mmdbresolve itself.



Path to a MaxMind Database file. Multiple databases may be specified.


To resolve a single address:

    echo | mmdbresolve -f /usr/share/GeoIP/GeoLite2-City.mmdb

  Example output:
db.0.path: /usr/share/GeoIP/GeoLite2-City.mmdb
db.0.status: OK
mmdbresolve.status: true
# End init
# GeoLite2-City
country.iso_code: US
country.names.en: United States
location.latitude: 37.751000
location.longitude: -97.822000
# End

See Also

wireshark(1), tshark(1)


mmdbresolve is part of the Wireshark distribution. The latest version of Wireshark can be found at <>.

HTML versions of the Wireshark project man pages are available at: <>.


  Original Author
  Gerald Combs            <gerald[AT]>


2021-07-15 3.4.7 The Wireshark Network Analyzer