[55978] in North American Network Operators' Group
Re: scripts to map IP to AS?
daemon@ATHENA.MIT.EDU (David G. Andersen)
Thu Feb 20 10:08:12 2003
Date: Thu, 20 Feb 2003 10:07:17 -0500
From: "David G. Andersen" <dga@lcs.mit.edu>
To: William Allen Simpson <wsimpson@greendragon.com>
Cc: nanog@merit.edu
Mail-Followup-To: "David G. Andersen" <dga@lcs.mit.edu>,
William Allen Simpson <wsimpson@greendragon.com>, nanog@merit.edu
In-Reply-To: <3E54D37D.4617B03D@greendragon.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Thu, Feb 20, 2003 at 08:09:31AM -0500, William Allen Simpson quacked:
>
> Anybody have a pointer to scripts to map IP to AS?
>
> There are still 10K-20K hosts spewing M$SQL slammer/sapphire packets,
> and I'd like to start blocking routing to those irresponsible AS's
> that haven't blocked their miscreant customers.
>
> http://isc.sans.org/port_details.html?port=1434
You can use a quick perl wrapper around whois, or you
could use this terribly ugly hacked up traceroute-ng that I
wrote to do lookups:
http://nms.lcs.mit.edu/software/ron/lookup_as.c
Compile with
gcc -DSTANDALONE=1 lookup_as.c -o lookup_as -lm
And then run. It gets the job done, but it's ugly. :)
-Dave
--
work: dga@lcs.mit.edu me: dga@pobox.com
MIT Laboratory for Computer Science http://www.angio.net/
I do not accept unsolicited commercial email. Do not spam me.
