[27245] in North American Network Operators' Group
Re: identifying ASN
daemon@ATHENA.MIT.EDU (Joe Shaw)
Thu Feb 10 14:16:57 2000
Date: Thu, 10 Feb 2000 13:03:41 -0600 (CST)
From: Joe Shaw <jshaw@insync.net>
To: Mark Kent <mark@noc.mainstreet.net>
Cc: nanog@nanog.org
In-Reply-To: <200002101834.KAA13120@noc.mainstreet.net>
Message-ID: <Pine.GSO.4.21.0002101251410.8941-100000@vellocet.insync.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
I get responses from whois.arin.net for all but AS5400. 2855 and 9057 are
handled by RIPE, but I still get a listing for the AS ranges assigned to
RIPE. For 11486 I get:
>whois -h whois.arin.net 11486
Worldcom Advance Networks (ASN-WAN)
1945 Old Gallows Road
Vienna, VA 22182-3931
US
Autonomous System Name: WAN
Autonomous System Number: 11486
For 5400, the first time I got:
>whois -h whois.arin.net 5400
Sorry, you shouldn't see this record.
The ARIN Registration Services Host contains ONLY Internet
[SNIP]
but the second time I tried (some six minutes later) I got:
>whois -h whois.arin.net 5400
European Regional Internet Registry/RIPE NCC (ASN-RIPE-ASNBLOCK5-ASNBLOCK)
These ASNs have been further assigned to European users.
Their contact information can be found in the RIPE database.
See below how to use that database to obtain up-to-date information.
Autonomous System Name: RIPE-ASNBLOCK5
Autonomous System Block: 5377 - 5631
Doesn't seem normal, since this is the first time I've ever seen that type
of behavior.
--
Joseph W. Shaw - jshaw@insync.net
Computer Security Consultant and Programmer
Free UNIX advocate - "I hack, therefore I am."
On Thu, 10 Feb 2000, Mark Kent wrote:
>
> With all this talk of tracing attacks I just noticed that
> whois -h whois.arin.net
> seems to not be as informative as it used to be.
>
> When looking up various ASN I sometimes get the information I want,
> but frequently I get:
>
> Sorry, you shouldn't see this record.
>
> or
>
> No match for ASN "..."
>
> (Sample ASes are 2855, 5400, 9057, 11486)
>
> Did I miss some policy change?
>
> -mark
>
> P.S. Fortunately, various radb-like entities still list
> information for a lot of ASes.
