Wireshark-dev: [Wireshark-dev] GeoIP information presentation

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Sun, 08 Mar 2009 10:38:11 +0100

Hi list,

Currently the GeoIP information is an alternating list of source and destination paramters, like so:

    [Source GeoIP Country: China]
    [Destination GeoIP Country: Japan]
    [Source GeoIP City: Tokyo, 40]
    [Destination GeoIP City: Tokyo, 40]
    [Source GeoIP AS Number: AS4837 CNCGROUP China169 Backbone]
    [Destination GeoIP AS Number: AS17676 Japan Network Information Center]
    [Source GeoIP Latitude: 35.685001]
    [Destination GeoIP Latitude: 35.685001]
    [Source GeoIP Longitude: 139.751404]
    [Destination GeoIP Longitude: 139.751404]

Making it hard to get an overview of source and destination information and using a lot of display real estate. My proposal would be to:

1. Group source / destination information
2. Put details into subtree

This would look like so:

v [Source GeoIP: China, Tokyo, 40, AS4837 CNCGROUP China169 Backbone, 35.685001, 139.751404]

      [Source GeoIP Country: China]
      [Source GeoIP City: Tokyo, 40]
      [Source GeoIP AS Number: AS4837 CNCGROUP China169 Backbone]
      [Source GeoIP Latitude: 35.685001]
      [Source GeoIP Longitude: 139.751404]

v [Destination GeoIP: Japan, Tokyo, 40, AS17676 Japan Network Information Center, 35.685001, 139.751404]

      [Destination GeoIP Country: Japan]
      [Destination GeoIP City: Tokyo, 40]
      [Destination GeoIP AS Number: AS17676 Japan Network Information Center]
      [Destination GeoIP Latitude: 35.685001]
      [Destination GeoIP Longitude: 139.751404]

Comments?

Thanx,
Jaap