North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: identifying ASN

  • From: Joe Shaw
  • Date: Thu Feb 10 14:19:13 2000

I get responses from whois.arin.net for all but AS5400.  2855 and 9057 are
handled by RIPE, but I still get a listing for the AS ranges assigned to
RIPE.  For 11486 I get: 

>whois -h whois.arin.net 11486
Worldcom Advance Networks (ASN-WAN)
   1945 Old Gallows Road
   Vienna, VA 22182-3931
   US

   Autonomous System Name: WAN
   Autonomous System Number: 11486

For 5400, the first time I got:
>whois -h whois.arin.net 5400
Sorry, you shouldn't see this record.

The ARIN Registration Services Host contains ONLY Internet
[SNIP]

but the second time I tried (some six minutes later) I got:

>whois -h whois.arin.net 5400
European Regional Internet Registry/RIPE NCC (ASN-RIPE-ASNBLOCK5-ASNBLOCK)
   These ASNs have been further assigned to European users.
   Their contact information can be found in the RIPE database.
   See below how to use that database to obtain up-to-date information.

   Autonomous System Name: RIPE-ASNBLOCK5
   Autonomous System Block: 5377 - 5631

Doesn't seem normal, since this is the first time I've ever seen that type
of behavior.

--
Joseph W. Shaw - [email protected]    
Computer Security Consultant and Programmer
Free UNIX advocate - "I hack, therefore I am."

On Thu, 10 Feb 2000, Mark Kent wrote:

> 
> With all this talk of tracing attacks I just noticed that
> whois -h whois.arin.net
> seems to not be as informative as it used to be.
> 
> When looking up various ASN I sometimes get the information I want,
> but frequently I get:
> 
>    Sorry, you shouldn't see this record.
> 
> or
> 
>    No match for ASN "..."
> 
> (Sample ASes are 2855, 5400, 9057, 11486)
> 
> Did I miss some policy change?
> 
> -mark
> 
> P.S.  Fortunately, various radb-like entities still list
>       information for a lot of ASes.