hadiasghari / pyasn

Python IP address to Autonomous System Number lookup module. (Supports fast local lookups, and historical lookups using archived BGP dumps.)
Other
294 stars 72 forks source link

binary representation #26

Closed j--- closed 7 years ago

j--- commented 8 years ago

Investigate using Silk and pysilk with the available binary IP-to-ASN mapping for the binary representation. http://tools.netsa.cert.org/silk-ipset/docs.html https://tools.netsa.cert.org/silk/pysilk.html http://routeviews-mirror.cert.org/pmap/ Specifically, use this object type to manipulate the available historical files: https://tools.netsa.cert.org/silk/pysilk.html#PrefixMap-Object

Will need to be careful to be backwards compatible and not introduce (too many) dependencies.

hadiasghari commented 8 years ago

@j--- thanks.. I support the endeavor of adding functionality to load the Silk IP-ASN-mappings (with optional dependencies). I'm busy in the next two weeks or so and can join you in the thinking after that.

hadiasghari commented 8 years ago

@j--- so here are some thoughts, based on our earlier discussion:

1- The most interesting integration IMO is to allow pyasn to consume pmap files (http://routeviews-mirror.cert.org/pmap/). This can be either by extending pyasn.pyasn() to directly read pmap, or extending pyasn_util_convert to convert them to ipasndat format.

2- I wouldn't want to introduce new dependencies to pyasn. So we would need to extract the minimum necessary parts from SiLK's Python or C code. Do you know which/how many files this is?

Thanks.

hadiasghari commented 7 years ago

Update: I plan to deprecate mrtx.py/dump_prefixes_to_binary_file() , and instead add the ability to read GZIP files in pyasn.c's loader. This will be more coherent and require less testing than adding a new file format.

The implementation will either use Zlib in C, or we will do the unzipping in python and pass a string to the C function.

The ability to read SiLK's files will be great to still have, once we figure out the minimum dependency issue (@j---).

hadiasghari commented 7 years ago

@j--- I will close this for now, since there has been little update/interest. Feel free to reopen it.