First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Will the "map" button of the IP-Endpoint dialog return?

Since Wireshark 2.6.0 the map button of the IP-Endpoint dialog has been removed. Is it planned to bring back that feature in later versions at the moment?

Christian_R's avatar
2.1k
Christian_R
asked 2018-05-12 11:50:02 +0000
edit flag offensive 0 remove flag close merge delete

Comments

I don't think there are any particular plans to add it, but if this is a desired feature, then I would recommend opening a Wireshark bug report requesting that it be added.

cmaynard's avatar cmaynard (2018-05-13 15:47:41 +0000) edit
more
  • delete
1

The comment on the change that removed it is:

commit f529ab5d0a27173ed68aa017a638b36b3dcf585f
Author: Gerald Combs <[email protected]>
Date:   Fri Mar 2 11:24:31 2018 -0800

    Remove the endpoint "Map" feature.

    Remove the endpoint map and its button from the Qt and GTK+ UIs. It
    depends on GeoIP Legacy for coordinate information and those databases
    are being deprecated in favor of MaxMind DB. We *could* upgrade the code
    to use mmdbresolve, but according to
    https://dev.maxmind.com/geoip/geoip2/geolite2/ they're also going to
    remove coordinate information from GeoLite2:

    "In addition, in 2019, latitude and longitude coordinates in the
     GeoLite2 databases will be removed.* Latitude and longitude coordinates
     will continue to be provided in GeoIP2 databases. Please check back for
     updates."

However, MaxMind are now saying that they won't remove the IP addresses:

Updated versions of the GeoLite Legacy databases are now only available to redistribution license ...

(more)
Guy Harris's avatar Guy Harris (2018-05-14 08:10:46 +0000) edit
more
  • delete

Thank you very much.

Christian_R's avatar Christian_R (2018-05-14 18:30:54 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

1

In any case, Chris Maynard is right - you should file a feature request on the Wireshark Bugzilla, and quote the MaxMind text to indicate that they're not going to be removing the coordinates, to serve as a reminder that this is an outstanding issue and to track discussion and implementation of the feature with the new database.

Guy Harris's avatar
19.9k
Guy Harris
answered 2018-05-14 08:18:41 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Bugreport 14693 has been submitted: https://bugs.wireshark.org/bugzilla/s...

Christian_R's avatar Christian_R (2018-05-14 18:30:39 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer