Re: Feature request: scanning an AS

[John Bond <john.r.bond () gmail com>]

Thanks David, Fydoor,

Ill take a look at the script this weekend.  It has been a while since
i looked at it so not sure what the issues could be of the top of my
head

> Does the Shadowserver system give you the org name associated with the
> AS number
Unfortunately the org dos not seem to be associated with the as
number.  you could take one of the prefixes and do something like the
following.

echo 'origin 128.12.0.0/16' | nc  asn.shadowserver.org 43

however this just dose the same things as
http://nmap.org/nsedoc/scripts/asn-query.html. Ill have a look at some
of the other services which offer this info see if there is a way to
get all info in one request.  Or look at merging this with asn-query
and asn-to-prefix


On 7 February 2012 23:17, Fyodor <fyodor () insecure org> wrote:
> On Wed, Sep 07, 2011 at 07:48:58PM +0200, John Bond wrote:
> > Sorry i just checked and think i updated this all ages ago but forgot
> > to send it in.  let me know if there is anything else that needs doing
> > and ill try to respond in less then 5 months
>
> Thanks!  Now that David has checked it into trunk, I tried it out a
> bit.  I'm not sure why, but sometimes I get this error:
>
> $ ./nmap --script=asn-to-prefix --script-args asn-to-prefix.asn=32
>
> Starting Nmap 5.61TEST4 ( http://nmap.org ) at 2012-02-07 14:14 PST
> Pre-scan script results:
> | asn-to-prefix:
> |   32
> |_    Name or service not known
>
>
> Other times it works great, though I often see the whitespace issue
> that David brought up:
>
>
> $ ./nmap --script=asn-to-prefix --script-args asn-to-prefix.asn=32
>
> Starting Nmap 5.61TEST4 ( http://nmap.org ) at 2012-02-07 14:14 PST
> Pre-scan script results:
> | asn-to-prefix:
> |   32
> |     128.12.0.0/16
> |
> |     171.64.0.0/14
> |_
>
> I made some improvements to the NSEDoc to give more standard example
> usage and a non-localhost output example.
>
> Does the Shadowserver system give you the org name associated with the
> AS number?  If so, it would be great if you can include that in the
> output.
>
> Thanks again for submitting the script--I'm sure many folks will find
> it useful!
>
> Cheers,
> Fyodor
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/