wikiroute

networking recipes

User Tools

Site Tools


who_is_using_this_ip_address

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
who_is_using_this_ip_address [2014/02/08 22:38] samerwho_is_using_this_ip_address [2014/02/08 22:47] – [2.2- Riswhois Server] samer
Line 71: Line 71:
  
 <WRAP info> <WRAP info>
-As mentioned on the [[http://www.ripe.net/data-tools/stats/ris/riswhois | Riswhois]] website, BGP information is more accurate than that contained in the databases of the regional registries: 21% of a set of unique IPs unmatched when using the routing registry vs. only 1% unmatched when using RIS data.+As mentioned on the [[http://www.ripe.net/data-tools/stats/ris/riswhois | Riswhois]] website, BGP information is more accurate than that contained in the databases of the regional registries: 21% of a set of unique IPs were unmatched when using the routing registry vs. only 1% unmatched when using RIS data.
 </WRAP> </WRAP>
  
 In the following, a simple example that shows the output of a riswhois query. In the following, a simple example that shows the output of a riswhois query.
  
- $ whois -h riswhois.ripe.net 217.70.180.132 +<code> 
- % This is RIPE NCC's Routing Information Service +$ whois -h riswhois.ripe.net 217.70.180.132 
- % whois gateway to collected BGP Routing Tables +route:        217.0.0.0/
- % IPv4 or IPv6 address to origin prefix match +origin:       AS3303 
-+descr:        SWISSCOM Swisscom (Switzerland) Ltd 
- % For more information visit http://www.ripe.net/ris/riswhois.html +lastupd-frst: 2014-01-30 00:20Z  217.29.66.120@rrc10 
-  +lastupd-last: 2014-02-04 14:36Z  192.65.185.243@rrc04 
- route:        192.0.0.0/+seen-at:      rrc04,rrc10 
- origin:       AS3303 +num-rispeers: 2 
- descr:        SWISSCOM Swisscom (Switzerland) Ltd +source:       RISWHOIS
- lastupd-frst: 2013-11-09 23:48Z  192.65.185.140@rrc04 +
- lastupd-last: 2013-11-09 23:48Z  192.65.185.243@rrc04 +
- seen-at:      rrc04 +
- num-rispeers:+
- source:       RISWHOIS +
-  +
- route:        217.0.0.0/+
- origin:       AS3303 +
- descr:        SWISSCOM Swisscom (Switzerland) Ltd +
- lastupd-frst: 2013-09-24 09:23Z  217.29.66.120@rrc10 +
- lastupd-last: 2013-11-09 23:48Z  192.65.185.243@rrc04 +
- seen-at:      rrc04,rrc10 +
- num-rispeers: +
- source:       RISWHOIS +
-  +
- route:        217.70.176.0/20 +
- origin:       AS29169 +
- descr:        GANDI-AS Gandi SAS +
- lastupd-frst: 2013-07-04 02:06Z  198.32.176.24@rrc14 +
- lastupd-last: 2013-11-11 15:53Z  195.69.146.99@rrc03 +
- seen-at:      rrc00,rrc01,rrc03,rrc04,rrc05,rrc06,rrc07,rrc10,rrc11,rrc12,rrc13,rrc14,rrc15 +
- num-rispeers: 114 +
- source:       RISWHOIS+
  
 +route:        217.70.176.0/20
 +origin:       AS29169
 +descr:        GANDI-AS Gandi SAS
 +lastupd-frst: 2013-10-21 08:55Z  202.249.2.185@rrc06
 +lastupd-last: 2014-02-08 13:28Z  187.16.218.21@rrc15
 +seen-at:      rrc00,rrc01,rrc03,rrc04,rrc05,rrc06,rrc07,rrc10,rrc11,rrc12,rrc13,rrc14,rrc15
 +num-rispeers: 111
 +source:       RISWHOIS
 +</code>
 ===== -- A Do-It-Yourself BGP Query Service ===== ===== -- A Do-It-Yourself BGP Query Service =====
  
 Start by downloading multiple routing tables for routeviews or RIPE RIS servers. Transform these tables into parsable format bu using bgpdump. Use any scripting language to perform a best prefix match and output the origin AS of your desired IP prefix. Start by downloading multiple routing tables for routeviews or RIPE RIS servers. Transform these tables into parsable format bu using bgpdump. Use any scripting language to perform a best prefix match and output the origin AS of your desired IP prefix.
who_is_using_this_ip_address.txt · Last modified: 2014/02/15 23:31 by samer