# GeoIP from dns.ip\_resolved

**URL:** <https://discuss.elastic.co/t/geoip-from-dns-ip-resolved/272520>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [May 9, 2021, 9:46pm UTC](https://discuss.elastic.co/t/geoip-from-dns-ip-resolved/272520 "2021-05-09T21:46:17Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![algira37](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/algira37/32/88482_2.png) [@algira37](https://discuss.elastic.co/u/algira37)\
**Post date:** [May 9, 2021, 9:46pm UTC](https://discuss.elastic.co/t/geoip-from-dns-ip-resolved/272520/1 "2021-05-09T21:46:17Z")

</div>

Hey guys!

I'm using my raspberry pi as a network scanner, I would like to create a map dashboard in kibana which contains the destinations geo location FROM dns resolved IPs.  
Home network, there are only private IPs, so my best guess to use dns.ip\_resolved to get geo information.  
PLease help! 🙂

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 10, 2021, 5:56am UTC](https://discuss.elastic.co/t/geoip-from-dns-ip-resolved/272520/2 "2021-05-10T05:56:18Z")

</div>

Welcome to our community! 😃 We aren't all guys though 🙂

> [@algira37](#):
>
> Home network, there are only private IPs, so my best guess to use dns.ip\_resolved to get geo information.

Except that won't work on private IPs as they are not geolocated in any public database.

Are there more than one locations to this network? If not, then just statically assign the coordinates via an [`fields`](https://www.elastic.co/guide/en/beats/packetbeat/current/common-protocol-options.html#packetbeat-configuration-fields) definition.

---

<div class="post-metadata">

**Author:** ![algira37](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/algira37/32/88482_2.png) [@algira37](https://discuss.elastic.co/u/algira37)\
**Post date:** [May 10, 2021, 7:20am UTC](https://discuss.elastic.co/t/geoip-from-dns-ip-resolved/272520/3 "2021-05-10T07:20:25Z")

</div>

> [@warkolm](#):
>
> We aren't all guys though 🙂

My apologies. I'm very new in elk architecture, and just guessing it can be work on resolved DNS ips because they are public ips.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 7, 2021, 9:20am UTC](https://discuss.elastic.co/t/geoip-from-dns-ip-resolved/272520/4 "2021-06-07T09:20:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.