# IpGeo | Tool To Extract IP Addresses From Captured Network Traffic File

**URL:** <https://onehack.st/t/ipgeo-tool-to-extract-ip-addresses-from-captured-network-traffic-file/237900>\
**Category:** Tools & Scripts\
**Tags:** tools, networking\
**Created:** [November 8, 2023, 8:17pm UTC](https://onehack.st/t/ipgeo-tool-to-extract-ip-addresses-from-captured-network-traffic-file/237900 "2023-11-08T20:17:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![WhiteHat](https://onehack.st/user_avatar/onehack.st/whitehat/32/162514_2.png) [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Post date:** [November 8, 2023, 8:17pm UTC](https://onehack.st/t/ipgeo-tool-to-extract-ip-addresses-from-captured-network-traffic-file/237900/1 "2023-11-08T20:17:00Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/c/0/c0db2a2e89fb0b0e2da8574a842264fa24006505.jpeg)

# IPGeo

IpGeo is a python tool to extract IP addresses from captured network traffic file (pcap/pcapng) and generate csv report containing details about the geolocation of each ip in the packets.

### The report contains:

1. Country:
2. Country Code.
3. Region
4. Region Name
5. City
6. Zip
7. Latitude
8. Longitude
9. Timezone
10. Isp
11. Org
12. Ip

## Installation

Use the package manager [pip3](https://pip.pypa.io/en/stable/) to install required modules.

pip3 install colorama pip3 install requests pip3 install pyshark

If you are not using Kali or ParrotOs or any other penetration distribution you need to install Tshark.

sudo apt install tshark

## Usage

python3 ipGeo.py # then you will enter captured traffic file path

## Screenshot from the script

[![ipGeo](https://user-images.githubusercontent.com/89426041/189775552-78dfb962-23ba-46e7-b1f0-3e31ef54ebd3.png)](https://user-images.githubusercontent.com/89426041/189775552-78dfb962-23ba-46e7-b1f0-3e31ef54ebd3.png)

## GitHub:

> **[GitHub - z4l4mi/IpGeo](https://github.com/z4l4mi/IpGeo)**
>
> Contribute to z4l4mi/IpGeo development by creating an account on GitHub.