who_is_using_this_ip_address
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
| who_is_using_this_ip_address [2014/02/08 22:45] – samer | who_is_using_this_ip_address [2014/02/09 00:23] – [2.2- Riswhois Server] samer | ||
|---|---|---|---|
| Line 68: | Line 68: | ||
| ==== -- Riswhois Server ==== | ==== -- Riswhois Server ==== | ||
| - | RIPE NCC implements a similar whois service named RISwhois by providing a higher level view over the most recently collected set of routing tables from the Remote Route Collectors (RRCs). Given an IPv4 or IPv6 address, RISwhois will tell which prefixes and origin ASes on which RRCs match that particular IP. | + | RIPE NCC implements a similar whois service named RISwhois by providing a higher level view over the most recently collected set of routing tables from the Remote Route Collectors (RRCs) |
| <WRAP info> | <WRAP info> | ||
| Line 74: | Line 74: | ||
| </ | </ | ||
| - | In the following, a simple example | + | In the following, a simple example shows the output of a Riswhois |
| - | $ whois -h riswhois.ripe.net | + | < |
| - | % This is RIPE NCC's Routing Information Service | + | $ whois -h riswhois.ripe.net |
| - | % whois gateway to collected BGP Routing Tables | + | route: |
| - | % IPv4 or IPv6 address to origin prefix match | + | origin: |
| - | % | + | descr: |
| - | % For more information visit http:// | + | lastupd-frst: |
| - | + | lastupd-last: | |
| - | route: | + | seen-at: |
| - | origin: | + | num-rispeers: |
| - | descr: | + | source: |
| - | lastupd-frst: | + | </ |
| - | lastupd-last: | + | |
| - | seen-at: | + | |
| - | num-rispeers: | + | |
| - | source: | + | |
| - | + | ||
| - | route: | + | |
| - | origin: | + | |
| - | descr: | + | |
| - | lastupd-frst: | + | |
| - | lastupd-last: | + | |
| - | seen-at: | + | |
| - | num-rispeers: | + | |
| - | source: | + | |
| - | + | ||
| - | route: | + | |
| - | origin: | + | |
| - | descr: | + | |
| - | lastupd-frst: | + | |
| - | lastupd-last: 2013-11-11 15: | + | |
| - | seen-at: | + | |
| - | num-rispeers: | + | |
| - | source: | + | |
| + | <WRAP round important> | ||
| + | Note RRCs may receive different information for the same IP prefix. | ||
| + | that Riswhois may provide multiple matchings for IP addresses. In such case, RRCs | ||
| + | </ | ||
| + | |||
| + | < | ||
| + | $ whois -h riswhois.ripe.net 217.70.184.1 | ||
| + | route: | ||
| + | origin: | ||
| + | descr: | ||
| + | lastupd-frst: | ||
| + | lastupd-last: | ||
| + | seen-at: | ||
| + | num-rispeers: | ||
| + | source: | ||
| + | |||
| + | route: | ||
| + | origin: | ||
| + | descr: | ||
| + | lastupd-frst: | ||
| + | lastupd-last: | ||
| + | seen-at: | ||
| + | num-rispeers: | ||
| + | source: | ||
| + | </ | ||
| ===== -- A Do-It-Yourself BGP Query Service ===== | ===== -- A Do-It-Yourself BGP Query Service ===== | ||
| Start by downloading multiple routing tables for routeviews or RIPE RIS servers. Transform these tables into parsable format bu using bgpdump. Use any scripting language to perform a best prefix match and output the origin AS of your desired IP prefix. | Start by downloading multiple routing tables for routeviews or RIPE RIS servers. Transform these tables into parsable format bu using bgpdump. Use any scripting language to perform a best prefix match and output the origin AS of your desired IP prefix. | ||
who_is_using_this_ip_address.txt · Last modified: 2014/02/15 23:31 by samer