[166876] in North American Network Operators' Group
Re: List of CDNs?
daemon@ATHENA.MIT.EDU (Patrick W. Gilmore)
Sat Nov 16 17:29:08 2013
From: "Patrick W. Gilmore" <patrick@ianai.net>
In-Reply-To: <52863870.5020607@aleae.com>
Date: Sat, 16 Nov 2013 17:28:39 -0500
To: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_92BA11DC-A299-4B47-8222-46DCCA22A3CF
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=iso-8859-1
First, the location of CDN nodes is not relevant to passive DNS =
monitoring. If Andrew would like a list of domains with CDN hostnames in =
them, that might be findable.
Second, a list of CDN nodes is likely impossible to gather & maintain =
without the help of the CDNs themselves. There are literally thousands =
of them, most do not serve the entire Internet, and they change =
frequently. And before you ask, I know at least Akamai will _not_ give =
you their list, so don't even try to ask them.
Sorry this makes your life more difficult. Perhaps if you explained why =
you were doing address lookups, the collective body could help you come =
up with a better solution?
--=20
TTFN,
patrick
On Nov 15, 2013, at 10:06 , Michael Collins, Aleae <mcollins@aleae.com> =
wrote:
> I'll second that; CDNs are a constant pain for me when I'm doing =
address
> lookups. A list of them would make life a lot easier for a bunch of
> different investigative processes.=20
>=20
> If there isn't one right now, I think I could get off my tuchas and
> start maintaining one if anyone's interested in pitching in.
>=20
>=20
> On 11/14/13 5:19 PM, Andrew Fried wrote:
>> Actually, a list of CDNs would be very handy. I harvest botnets and
>> fast flux hosts out of passive dns, and some of the heuristics used =
to
>> identify them are similar to what CDNs look like.
>>=20
>> Having a decent list of CDN effective top level domains alone would =
be
>> useful for redacting those hosts.
>>=20
>> Andy
>>=20
>>=20
>> Andrew Fried
>> andrew.fried@gmail.com
>>=20
>> On 11/14/13, 5:11 PM, Patrick W. Gilmore wrote:
>>> List of CDNs would be difficult, but not impossible. Although they =
do different things, so a simple list is unlikely to be as useful as it =
looks.=20
>>>=20
>>> A lost of CDN "DC nodes" is not possible. Why do you care about such =
a thing anyway?
>>>=20
>=20
>=20
--Apple-Mail=_92BA11DC-A299-4B47-8222-46DCCA22A3CF
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iQEcBAEBAgAGBQJSh/GXAAoJEHZX8udmu5TX8K0IAIn7CVniTu24O32lXmi1rFCj
4StG/VrD8/wZg0WGCWBtCqQjNiS5QEs0Tf7Dayt7XotAEF4/BU2F3wJjkNnLqtdW
I/YJ3eMIVjl54b+g71J81clag4FenXsj+99ACZgc6EdhRxUPeT2NqtARjTbq32lN
5DMF54AD88x69V2DmuPlRbZ0S/cLBvhAzHJ3jKcL6ynxnvgl3fYINKkAlBYj6ld/
WXwNdlSMagcvYkIKiOLR+tRv4y5AMMbNtEtpqPO1tg8bbqVkW17SNQM+bAPb3LON
XiNV9/HTgSihpPIt8XrRcpshZlos5fNmyMuTr3X4uyKJ9uafbdTIw2KYKgM1lOU=
=2VdJ
-----END PGP SIGNATURE-----
--Apple-Mail=_92BA11DC-A299-4B47-8222-46DCCA22A3CF--
