who_is_using_this_ip_address
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
who_is_using_this_ip_address [2014/02/08 22:03] – samer | who_is_using_this_ip_address [2014/02/08 22:06] – samer | ||
---|---|---|---|
Line 5: | Line 5: | ||
===== -- Limitations of the whois Information ===== | ===== -- Limitations of the whois Information ===== | ||
- | A typical method to identify the AS that announces a specific IP prefix is to use the whois protocol. A whois command is available on main OSes and enables to query the databases of regional registries such as ARIN, RIPE, LACNINC, ... A very interesting [[http:// | + | A typical method to identify the AS that announces a specific IP prefix is to use the whois protocol. A whois command is available on main OSes and enables to query the databases of regional registries such as ARIN, RIPE, LACNINC, ... A very interesting [[http:// |
$ whois -h whois.ripe.net 148.60.0.0/ | $ whois -h whois.ripe.net 148.60.0.0/ | ||
Line 16: | Line 16: | ||
===== -- Using BGP Information ===== | ===== -- Using BGP Information ===== | ||
- | An alternative method for identifying the AS that announces a specific IP prefix consists in studying the BGP routing information. Typically, each BGP speaking router stores in a BGP table the routing announcements received for each prefix together with some protocol attributes such as the AS-PATH. This attribute contains the list of ASes traversed by the BGP announcement, | + | An alternative method for identifying the AS that announces a specific IP prefix consists in studying the BGP routing information. Typically, each BGP speaking router stores in a BGP table the routing announcements received for each prefix together with some protocol attributes such as the AS-PATH. This attribute contains the list of ASes traversed by the BGP announcement, |
[{{ : | [{{ : | ||
- | However, having access to a DFZ BGP router is not easy in practice. Alternatively, | + | However, having access to a DFZ BGP router is not easy in practice. Alternatively, |
Let us try for example to log on the Allstream route server in Canada and identify the origin AS of 148.60.0.0/ | Let us try for example to log on the Allstream route server in Canada and identify the origin AS of 148.60.0.0/ | ||
who_is_using_this_ip_address.txt · Last modified: 2014/02/15 23:31 by samer