January 2010 - db-help - mailman.ripe.net

"country": what to for "strange" locations?
by Christian 'wiwi' Wittenhorst 30 Jan '10

30 Jan '10

Hello... I know there's "EU" for europe, but what to use for: - anycast services without any specific location - blackholes - ... For example, 193.0.14.0/23** (k.root-servers.net) uses "country: NL". Documentation says: "There are no rules defined for this attribute." Is there a best practice? If not, is there a chance to get "ZZ" approved for "unspecified" as ISO 3166-1 specifies "ZZ" (and some more) for "/User-assigned code elements"... Best regards, Christian /

2 1

whois queries with respect to RIPE policies
by chris 28 Jan '10

28 Jan '10

Hi list, During the next days, I'm planning to analyze some suspicious traffic that I collected during an execution of malware. One of my goal is to retrieve additional information for every IP address that is in that traffic. For this, I believe that the whois data is a very valuable source of information. However, I realize that I should not overdo in performing whois queries to RIPE (and RIR databases in general). I expect to query the database ~ 20,000 times per day. Here comes my problem: According to the RIPE policy, I am allowed to query the database even frequently. At the same time, one should avoid querying personal data too often. I am trying now to find a program (e.g., jwhois, the 'usual' UNIX whois client, with some weird parameters) that allow me to comply to the RIPE policies. For my convenicen, if I can somehow avoid it, I'd rather use the online database instead of syncing it and performing requests locally. In addition, I checked the whois usage policies of other RIRs. Admittedly, RIPE has got the far most transparent ones! Others don't give explicit limits in their usage, and I have to hope that I won't be blocked when using whois extensively. Would you please share your experiences, and maybe even give hints about a 'correct' usage of a whois client? Thanks in advance, Chris

4 5

Newbie: Problem loading ripe.db.dummy.gz: 0 rows affected...
by Christian 'wiwi' Wittenhorst 26 Jan '10

26 Jan '10

Hello and Good Evening, when I try to load the current whois snapshop with ./make_db -c /tmp/v/conf/rip.config -s RIPE -1 it fails after some time with: [0] 0.00s OK [aut-num:AS12502][U:ADD] [0] 0.00s OK [aut-num:AS6906][U:ADD] [0] 0.01s OK [aut-num:AS5624][U:ADD] [0] 0.00s OK [aut-num:AS5408][U:ADD] [0] 0.00s OK [aut-num:AS8581][U:ADD] [0] 0.00s OK [aut-num:AS5489][U:ADD] [0] 0.00s OK [aut-num:AS8991][U:ADD] [0] 0.00s OK [aut-num:AS1955][U:ADD] [0] 0.00s OK [aut-num:AS9150][U:ADD] [0] 0.00s OK [aut-num:AS12509][U:ADD] [0] 0.00s OK [aut-num:AS8752][U:ADD] [0] 0.00s OK [aut-num:AS12511][U:ADD] [0] 0.00s OK [aut-num:AS6827][U:ADD] [0] 0.00s OK [aut-num:AS8798][U:ADD] [0] 0.00s OK [aut-num:AS12515][U:ADD] [0] 0.00s OK [aut-num:AS12517][U:ADD] [0] 0.00s OK [aut-num:AS9020][U:ADD] [0] 0.00s OK [aut-num:AS12522][U:ADD] [0] 0.00s OK [aut-num:AS12524][U:ADD] [0] 0.00s OK [aut-num:AS12526][U:ADD] 0 rows affected [ INSERT mnt_routes SELECT 0, 25678, mntner.object_id, 2 FROM mntner WHERE mntner.mntner='WESTEND-MNT' ] *** died: +1691 modules/ud/ud_core.c *** Backtrace with command line ./load_all.sh: line 15: 24325 Broken pipe ${UNZIP1} ${object_file} 24326 Exit 141 | eval ${FILTER} 24328 Segmentation fault | $LOADER -L $1 -p ${PROPERTIES} -s ${SOURCE} cat: gzip -cd /tmp/ripe.db.dummy.gz | eval cat | /root/projects/v/bin/loader -L 0 -p /tmp/v/conf/rip.config -s RIPE: No such file or directory *** ERROR: Loader failure [1]. Exiting\n ************** ERROR *************** *** 22:18:26 Error loading database=ripe_RIPEDB for source=RIPE, ./make_db exiting ************************************ It seems to be the same problem as in: <http://www.ripe.net/ripe/maillists/archives/db-help/2004/msg00059.html> but I am using whoisserver-3.6.tar.gz. The object following AS12526 is: aut-num: AS5517 as-name: CSL descr: CSL Computer Service Langenbach GmbH AS# import: from AS286 accept ANY import: from AS8220 accept ANY import: from AS20676 accept ANY import: from AS35652 accept AS35652 export: to AS286 announce AS5517 AND AS35652 export: to AS8220 announce AS5517 AND AS35652 export: to AS20676 announce AS5517 AND AS35652 export: to AS35652 announce ANY admin-c: CSL6-RIPE tech-c: CSL6-RIPE mnt-by: CSL-MNT mnt-routes: WESTEND-MNT {194.140.239.0/24} mnt-routes: CSL-MNT changed: invaliduwe(a)nrw.net 20060808 changed: invalidaldem(a)nrw.net 20091207 source: RIPE which has "mnt-routes: WESTEND-MNT {194.140.239.0/24}"... May I ask for some help? Best regards, Christian

2 1

Problem in creating a domain
by Marija Jovanovska 21 Jan '10

21 Jan '10

Hi, We are trying to create a domain for reverse dns with the following information: domain: 184.128.95.in-addr.arpa descr: Reverse delegation admin-c: JK521-RIPE tech-c: JK521-RIPE zone-c: JK521-RIPE nserver: dns1.telesmart-telekom.com nserver: dns2.telesmart-telekom.com mnt-by: jasminakecap-mnt changed: jasminakecap(a)telesmart.mk 20100121 source: RIPE But we are getting these errors: # of Creations # of Modifications # of Deletions # of No-Operations # of Syntax Errors Success 0 0 0 0 - Failure 1 0 0 - 0 DETAILED EXPLANATION: Create FAILED: [domain] 184.128.95.in-addr.arpa ***Info: Authorisation passed ***Info: Syntax check passed domain: 184.128.95.in-addr.arpa descr: Reverse delegation admin-c: JK521-RIPE tech-c: JK521-RIPE zone-c: JK521-RIPE nserver: dns1.telesmart-telekom.com nserver: dns2.telesmart-telekom.com mnt-by: jasminakecap-mnt changed: jasminakecap(a)telesmart.mk 20100121 source: RIPE ***Info: Parent has RIPE NCC nameservers. ***Info: Authorisation for parent [inetnum] 95.128.184.0 - 95.128.184.255 using mnt-by: not authenticated by: jasminakecap-mnt ***Info: Authorisation for parent [domain] 95.in-addr.arpa using mnt-lower: not authenticated by: RIPE-NCC-REVERSE-MNT ***Error: RDNS Authorisation failed Can you please explain to me what is the meaning of these errors? Is it due to incorrect configuration of our dns1-primary and dns2-secondary servers or is it due to some registration problems with RIPE? Thank you in advance for your help, Marija Jovanovska BScEE Telesmart Telekom DOO TS1 bul. Vojvodina br.4 ul. Nikola Parapunov bb (NOC) 1000 Skopje R.Macedonia Tel +389 2 3070244 Fax: +389 2 3093761 Mobile: +389 78 444459 e-mail: <mailto:marija.jovanovska@telesmart.mk> marija.jovanovska(a)telesmart.mk

1 0