IP whois info

When processing cflowd and wanting to resolve IP nets as well as ASNs as quickly as possible is there a trick to do the lookups rather than trying RIPE, ARIN, APNIC (and perhaps others) in a cyclical manner? Is there some static file that one can download that lists just the IP nets and ASN and who it belongs to (for all databases - not just ARIN)?

Thanks,
Hank

Dear Hank,

Hank Nussbacher wrote:

When processing cflowd and wanting to resolve IP nets as well as ASNs as
quickly as possible is there a trick to do the lookups rather than trying
RIPE, ARIN, APNIC (and perhaps others) in a cyclical manner? Is there some
static file that one can download that lists just the IP nets and ASN and
who it belongs to (for all databases - not just ARIN)?

At the RIPE NCC we have separate files for IP (inetnum's) and ASN
(autnum's) available at the RIPE ftp site. However contact information
is not available in form of a file. Please contact <ripe-dbm@ripe.net>
to discuss the details.

Thanks,
Hank

Regards,

Andrei Robachevsky
DB Group Manager
RIPE NCC

http://www.allwhois.com

Probably the best way to do it manually, though it'd be a pain to script.

When processing cflowd and wanting to resolve IP nets as well as ASNs
as quickly as possible is there a trick to do the lookups rather than
trying RIPE, ARIN, APNIC (and perhaps others) in a cyclical manner?

The guys at geektools.com have a whois server that attempts to locate the
proper authority and redirect the query automatically based on the
provided data, and it works with IP addresses. It does break whenever the
output from the different whois servers get modified, but its just a perl
script so they fix it. Every operator should have this script.

http://www.geektools.com/software.html

They have a web front-end at http://www.geektools.com/cgi-bin/proxy.cgi if
you don't want to install the script, but the script is definitely the way
to go for most operators.

I won't say anything about how handy a referral-based LDAP system with a
standardized schema would be for all of this.

Not what I am looking for. www.allwhois.com as is www.uwhois.com check domain names. I am looking for a similar tool to globally look up inetnum objects.

-Hank

[ On Thursday, January 11, 2001 at 09:14:36 (+0200), Hank Nussbacher wrote: ]

Subject: Re: IP whois info

Not what I am looking for. www.allwhois.com as is www.uwhois.com check
domain names. I am looking for a similar tool to globally look up inetnum
objects.

The (now rather old) awhois script I wrote a while back attempted to do
that, but I'm personally now using this tool, which effectively "Does It
All!":

  http://www.linux.it/~md/software/whois_4.5.2.tar.gz