Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4030] GeoIP issues.

Date: Tue, 29 May 2012 18:50:23 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4030

Chris Maynard <christopher.maynard@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Platform|Other                       |x86-64
         OS/Version|Windows XP                  |Windows 7

--- Comment #27 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2012-05-29 18:50:22 PDT ---
(In reply to comment #26)
> I ended up creating a pread() wrapper as Guy described in comment #23. Checked
> in in r42905. The GeoIP tracker at SourceForge appears to be inactive so I
> submitted the patch on fourm.maxmind.com.

Unfortunately, things are still not correct, and all observances listed in
comment 13 still apply, with the following differences to these items:

3) The non-UTF8 characters (assuming they're non-UTF8?) are still not displayed
properly.  Before, instead of displaying "Brasília", Wireshark displayed
"Bras\355\lia"; now it displays "Bras\303\255lia".  Again, the menagerie's
mond.pcap file has more examples of this as well:

"Brazil","-","S\303\243o Paulo, 27"
"Brazil","-","Vit\303\263ria, 08"
"Colombia","-","Bogot\303\241, 33"
"Denmark","-","\303\205lborg, 19"
"Denmark","-","Nyk\303\270bing, 20"
"France","-","Chalon-sur-sa\303\264ne, A1"
"France","-","Villefranche-sur-sa\303\264ne, "
"Germany","-","F\303\274rstenwalde, 11"
"Germany","-","H\303\266st, 07"
"Hungary","-","T\303\266r\303\266kb\303\241lin"
"Iceland","-","Reykjav\303\255k, 10"
"Russian Federation","-","Korol\303\253v, 47"
"Spain","-","M\303\241laga, 51"
"Sweden","-","\303\226rkelljunga, 27"
"Sweden","-","G\303\266teborg, 28"
"Sweden","-","S\303\266lvesborg, 02"
"Taiwan","-","Taoy\303\274an, 04"

6) With only GeoIPv6.dat and GeoLiteCityv6.dat, the 3 columns: City, Latitude
and Longitude are displayed.

7) With all 4 databases present, there are 6 columns: 2 Country columns, 2 City
columns, and the Latitude and Longitude columns.  Both the 2nd Country and City
columns contain nothing but "-".

The results were obtained with SVN 42907, using the latest GeoIP databases from
http://www.maxmind.com/app/geolite, and tested on Windows 7 64-bit with the
attached geoiptest4.pcap file.

Of note, when working with the attached geoiptest6.pcap file, then when all
databases are present, it becomes a bit more obvious what's going on with the
duplicated Country & City columns since now the 1st Country column contains
nothing but "-" while the 2nd Country column contains the actual location
information.  (In this case, there is no City information either way, but if
there were, then I would be willing to bet that it would appear in the 2nd City
column.)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.