Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] GeoIP information presentation

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Sun, 08 Mar 2009 15:12:00 +0100
Hi,

It's done in revision 27655.

Thanx,
Jaap

Ulf Lamping wrote:
Jaap Keuter schrieb:
Hi list,

Currently the GeoIP information is an alternating list of source and destination paramters, like so:

     [Source GeoIP Country: China]
     [Destination GeoIP Country: Japan]
     [Source GeoIP City: Tokyo, 40]
     [Destination GeoIP City: Tokyo, 40]
     [Source GeoIP AS Number: AS4837 CNCGROUP China169 Backbone]
     [Destination GeoIP AS Number: AS17676 Japan Network Information Center]
     [Source GeoIP Latitude: 35.685001]
     [Destination GeoIP Latitude: 35.685001]
     [Source GeoIP Longitude: 139.751404]
     [Destination GeoIP Longitude: 139.751404]

Making it hard to get an overview of source and destination information and using a lot of display real estate. My proposal would be to:
1. Group source / destination information
2. Put details into subtree

This would look like so:

v [Source GeoIP: China, Tokyo, 40, AS4837 CNCGROUP China169 Backbone, 35.685001, 139.751404]
       [Source GeoIP Country: China]
       [Source GeoIP City: Tokyo, 40]
       [Source GeoIP AS Number: AS4837 CNCGROUP China169 Backbone]
       [Source GeoIP Latitude: 35.685001]
       [Source GeoIP Longitude: 139.751404]
v [Destination GeoIP: Japan, Tokyo, 40, AS17676 Japan Network Information Center, 35.685001, 139.751404]
       [Destination GeoIP Country: Japan]
       [Destination GeoIP City: Tokyo, 40]
       [Destination GeoIP AS Number: AS17676 Japan Network Information Center]
       [Destination GeoIP Latitude: 35.685001]
       [Destination GeoIP Longitude: 139.751404]

Comments?

Sounds reasonable!

Will you implement it? Otherwise please write a bugzilla entry ;-)

Regards, ULFL