who_is_using_this_ip_address
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
who_is_using_this_ip_address [2014/02/09 13:08] – [Basic Steps] samer | who_is_using_this_ip_address [2014/02/09 14:15] – [Who is Using This IP Address?] samer | ||
---|---|---|---|
Line 1: | Line 1: | ||
====== Who is Using This IP Address? ===== | ====== Who is Using This IP Address? ===== | ||
- | A frequent question that faces network administrators or application developers consists in identifying //who is using a specific public IP address//. This information can be utilized for instance to perform user localization and enable location-based services or user access control. In this context, a main technical challenge is to associate | + | A frequent question that faces network administrators or application developers consists in identifying //who is using a specific public IP address//. This information can be utilized for instance to perform user localization and enable location-based services or user access control. In this context, a main technical challenge is to associate |
===== -- Limitations of the whois Information ===== | ===== -- Limitations of the whois Information ===== | ||
Line 117: | Line 117: | ||
Here are some hints and recipes to implement a server that maps IP prefixes with AS numbers based on BGP information. | Here are some hints and recipes to implement a server that maps IP prefixes with AS numbers based on BGP information. | ||
- | ==== Basic Steps ==== | + | ==== -- Basic Steps ==== |
Start by downloading raw BGP data collected by RIPE NCC servers from http:// | Start by downloading raw BGP data collected by RIPE NCC servers from http:// | ||
Line 131: | Line 131: | ||
</ | </ | ||
+ | Here is a typical line in the dumped file, where you can see the prefix '' | ||
< | < | ||
TABLE_DUMP2|1389513606|B|85.132.60.10|29049|148.60.0.0/ | TABLE_DUMP2|1389513606|B|85.132.60.10|29049|148.60.0.0/ | ||
.132.60.10|0|0|1273: | .132.60.10|0|0|1273: | ||
</ | </ | ||
- | Use any scripting language to perform a best prefix match and output | + | |
+ | Now you can use your favorite | ||
+ | |||
+ | ==== -- Software Tools ==== | ||
+ | |||
+ | Fortunately, | ||
+ | - [[http:// | ||
+ | - [[https:// | ||
+ | - [[http:// |
who_is_using_this_ip_address.txt · Last modified: 2014/02/15 23:31 by samer