Differences

This shows you the differences between two versions of the page.

--- who_is_using_this_ip_address [2014/02/08 22:38] – samer
+++ who_is_using_this_ip_address [2014/02/08 23:21] – [2.2- Riswhois Server] samer
@@ Line 68: / Line 68: @@
 ==== -- Riswhois Server ====
-RIPE NCC implements a similar whois service named RISwhois by providing a higher level view over the most recently collected set of routing tables from the Remote Route Collectors (RRCs). Given an IPv4 or IPv6 address, RISwhois will tell which prefixes and origin ASes on which RRCs match that particular IP.
+RIPE NCC implements a similar whois service named RISwhois by providing a higher level view over the most recently collected set of routing tables from the Remote Route Collectors (RRCs) at different [[http://www.ripe.net/data-tools/stats/ris/ris-peering-policy | locations]] in the world. Given an IPv4 or IPv6 address, RISwhois will tell which prefixes and origin ASes on which RRCs match that particular IP.
 <WRAP info>
-As mentioned on the [[http://www.ripe.net/data-tools/stats/ris/riswhois | Riswhois]] website, BGP information is more accurate than that contained in the databases of the regional registries: 21% of a set of unique IPs unmatched when using the routing registry vs. only 1% unmatched when using RIS data.
+As mentioned on the [[http://www.ripe.net/data-tools/stats/ris/riswhois | Riswhois]] website, BGP information is more accurate than that contained in the databases of the regional registries: 21% of a set of unique IPs were unmatched when using the routing registry vs. only 1% unmatched when using RIS data.
 </WRAP>
-In the following, a simple example that shows the output of a riswhois query.
+In the following, a simple example shows the output of a riswhois query. The IP address ''203.178.141.194'' is originated by AS ''2500'' and this informations is seen by 16 RRCs.
-	$ whois -h riswhois.ripe.net 217.70.180.132
-	% This is RIPE NCC's Routing Information Service
-	% whois gateway to collected BGP Routing Tables
-	% IPv4 or IPv6 address to origin prefix match
-	%
-	% For more information visit http://www.ripe.net/ris/riswhois.html
-	route:        192.0.0.0/3
-	origin:       AS3303
-	descr:        SWISSCOM Swisscom (Switzerland) Ltd
-	lastupd-frst: 2013-11-09 23:48Z  192.65.185.140@rrc04
-	lastupd-last: 2013-11-09 23:48Z  192.65.185.243@rrc04
-	seen-at:      rrc04
-	num-rispeers: 2
-	source:       RISWHOIS
-	route:        217.0.0.0/8
-	origin:       AS3303
-	descr:        SWISSCOM Swisscom (Switzerland) Ltd
-	lastupd-frst: 2013-09-24 09:23Z  217.29.66.120@rrc10
-	lastupd-last: 2013-11-09 23:48Z  192.65.185.243@rrc04
-	seen-at:      rrc04,rrc10
-	num-rispeers: 3
-	source:       RISWHOIS
-	route:        217.70.176.0/20
-	origin:       AS29169
-	descr:        GANDI-AS Gandi SAS
-	lastupd-frst: 2013-07-04 02:06Z  198.32.176.24@rrc14
-	lastupd-last: 2013-11-11 15:53Z  195.69.146.99@rrc03
-	seen-at:      rrc00,rrc01,rrc03,rrc04,rrc05,rrc06,rrc07,rrc10,rrc11,rrc12,rrc13,rrc14,rrc15
-	num-rispeers: 114
-	source:       RISWHOIS
+<code>
+$ whois -h riswhois.ripe.net 203.178.141.194
+route:        203.178.128.0/17
+origin:       AS2500
+descr:        WIDE-BB WIDE Project
+lastupd-frst: 2014-01-23 12:42Z  202.249.2.185@rrc06
+lastupd-last: 2014-02-08 13:26Z  187.16.218.21@rrc15
+seen-at:      rrc00,rrc01,rrc03,rrc04,rrc05,rrc06,rrc07,rrc10,rrc11,rrc12,rrc13,rrc14,rrc15
+num-rispeers: 105
+source:       RISWHOIS
+</code>
 ===== -- A Do-It-Yourself BGP Query Service =====
 Start by downloading multiple routing tables for routeviews or RIPE RIS servers. Transform these tables into parsable format bu using bgpdump. Use any scripting language to perform a best prefix match and output the origin AS of your desired IP prefix.