1 /* Read IPv4 and IPv6 addresses on stdin and print their MMDB entries on stdout.
3 * Wireshark - Network traffic analyzer
4 * By Gerald Combs <gerald@wireshark.org>
5 * Copyright 1998 Gerald Combs
7 * This progam uses the MaxMind DB library (libmaxminddb) and MUST be
8 * compatible with its license (Apache 2.0).
10 * SPDX-License-Identifier: MIT
19 #include <maxminddb.h>
21 #define MAX_ADDR_LEN 46
22 #define MMDBR_STRINGIFY(x) MMDBR_STRINGIFY_S(x)
23 #define MMDBR_STRINGIFY_S(s) #s
24 #define OUT_BUF_SIZE 65536
26 // Uncomment to enable slow lookups. Only useful on Windows for now.
27 // #define MMDB_DEBUG_SLOW 1
29 #ifdef MMDB_DEBUG_SLOW
35 static const char *co_iso_key[] = {"country", "iso_code", NULL};
36 static const char *co_name_key[] = {"country", "names", "en", NULL};
37 static const char *ci_name_key[] = {"city", "names", "en", NULL};
38 static const char *asn_o_key[] = {"autonomous_system_organization", NULL};
39 static const char *asn_key[] = {"autonomous_system_number", NULL};
40 static const char *l_lat_key[] = {"location", "latitude", NULL};
41 static const char *l_lon_key[] = {"location", "longitude", NULL};
42 static const char *empty_key[] = {NULL};
44 static const char **lookup_keys[] = {
55 static void exit_err(void) {
56 fprintf(stderr, "Usage: mmdbresolve -f db_file [-f db_file ...]\n");
61 main(int argc, char *argv[])
63 char addr_str[MAX_ADDR_LEN+1];
64 size_t mmdb_count = 0;
65 MMDB_s *mmdbs = NULL, *new_mmdbs;
68 char *out_buf = (char *) malloc(OUT_BUF_SIZE);
69 setvbuf(stdout, out_buf, _IOFBF, OUT_BUF_SIZE);
71 fprintf(stdout, "[init]\n");
73 // If we need to handle anything beyond "-f" we'll probably want to
74 // link with GLib and use GOption.
76 while (arg_idx < argc - 1) {
77 if (strcmp(argv[arg_idx], "-f") == 0) {
79 const char *db_arg = argv[arg_idx];
81 mmdb_err = MMDB_open(db_arg, 0, &try_mmdb);
82 fprintf(stdout, "db.%zd.path: %s\n", mmdb_count, db_arg);
83 fprintf(stdout, "db.%zd.status: ", mmdb_count);
84 if (mmdb_err == MMDB_SUCCESS) {
86 new_mmdbs = (MMDB_s *) realloc(mmdbs, mmdb_count * sizeof(MMDB_s));
87 if (new_mmdbs == NULL) {
89 fprintf(stdout, "ERROR out of memory\n");
93 mmdbs[mmdb_count - 1] = try_mmdb;
94 fprintf(stdout, "OK\n");
95 fprintf(stdout, "db.%zd.type: %s\n", mmdb_count, mmdbs[mmdb_count - 1].metadata.database_type);
97 fprintf(stdout, "ERROR %s\n", MMDB_strerror(mmdb_err));
103 fprintf(stdout, "mmdbresolve.status: %s\n", mmdb_count > 0 ? "true": "false");
104 fprintf(stdout, "# End init\n");
107 if (arg_idx != argc || mmdb_count < 1) {
111 while (!feof(stdin)) {
114 if (fscanf(stdin, "%" MMDBR_STRINGIFY(MAX_ADDR_LEN) "s", addr_str) < 1) {
117 fprintf(stdout, "[%s]\n", addr_str);
119 #ifdef MMDB_DEBUG_SLOW
125 for (size_t mmdb_idx = 0; mmdb_idx < mmdb_count; mmdb_idx++) {
126 fprintf(stdout, "# %s\n", mmdbs[mmdb_idx].metadata.database_type);
127 MMDB_lookup_result_s result = MMDB_lookup_string(&mmdbs[mmdb_idx], addr_str, &gai_err, &mmdb_err);
129 if (result.found_entry && gai_err == 0 && mmdb_err == MMDB_SUCCESS) {
130 for (size_t key_idx = 0; lookup_keys[key_idx][0]; key_idx++) {
131 MMDB_entry_data_s entry_data;
132 int status = MMDB_aget_value(&result.entry, &entry_data, lookup_keys[key_idx]);
133 if (status == MMDB_SUCCESS && entry_data.has_data) {
135 for (int idx = 0; lookup_keys[key_idx][idx] != 0; idx++) {
136 fprintf(stdout, "%s%s", sep, lookup_keys[key_idx][idx]);
139 switch (entry_data.type) {
140 case MMDB_DATA_TYPE_UTF8_STRING:
142 char len_fmt[12]; // : %.xxxxxs\n\0
143 snprintf(len_fmt, 11, ": %%.%us\n", entry_data.data_size);
144 fprintf(stdout, len_fmt, entry_data.utf8_string);
147 case MMDB_DATA_TYPE_UINT16:
148 fprintf(stdout, ": %u\n", entry_data.uint16);
150 case MMDB_DATA_TYPE_UINT32:
151 fprintf(stdout, ": %u\n", entry_data.uint32);
153 case MMDB_DATA_TYPE_INT32:
154 fprintf(stdout, ": %d\n", entry_data.int32);
156 case MMDB_DATA_TYPE_BOOLEAN:
157 fprintf(stdout, ": %s\n", entry_data.boolean ? "True" : "False");
159 case MMDB_DATA_TYPE_DOUBLE:
160 fprintf(stdout, ": %f\n", entry_data.double_value);
162 case MMDB_DATA_TYPE_FLOAT:
163 fprintf(stdout, ": %f\n", entry_data.float_value);
166 fprintf(stdout, ": UNKNOWN (%u)\n", entry_data.type);
174 fprintf(stdout, "# End %s\n", addr_str);
184 * Editor modelines - http://www.wireshark.org/tools/modelines.html
189 * indent-tabs-mode: nil
192 * vi: set shiftwidth=4 tabstop=8 expandtab:
193 * :indentSize=4:tabSize=8:noTabs=true: