search

ixmaps / website

IXmaps website (depricated - replaced with website2017 repo)
https://ixmaps.ca
Other
1 stars 0 forks source link

Explore page - Puzzling ASN -1 #6

Open Andrew-Clement opened 8 years ago

Andrew-Clement commented 8 years ago

For TR TRdetails, based on Maxmind, shows 75.153.170.0 and 173.182.212.167 as ASN=-1 (ie Reserved –AS), but ARIN shows both as Telus)

Traceroute details: ID 135826 created on 2015-12-19 21:34:57-05 Origin: Submitted by bitterest from V3B 3

1 75.153.170.0 22 -Reserved AS- Edmonton AB Maxmind 75.153.170.0 Flag This IP 4 173.182.212.167 22 -Reserved AS- Burnaby BC Maxmind 173.182.212.167

colinmccann commented 8 years ago

This is tough to unthread, because we don't use sufficient time stamping - it is possible eg that when that ip was created in the DB, it was not listed as Telus by ARIN (where are you looking this up btw? I need a point of comparison). We don't update asnums over time - whatever is entered as asn when the ip is added to the DB is final.

agamba commented 8 years ago

In fact none of these ips have info about the ASN in latest MaxMind database. You can check this here https://www.ixmaps.ca/application/geoip/

Andrew-Clement commented 8 years ago

Hmm. I wonder why MM gives quite accurate results for my location (184.66.109.66) but is silent on ASN, when your results show GeoIPASNum.dat gives correct ASN result: AS6327 Shaw Communications Inc., silent of actual location.

Andrew-Clement commented 8 years ago

Referring to the original query about 75.153.170.0 above, https://www.ixmaps.ca/application/geoip/ does worse, with no ASN info and placing hte router in Toronto

pastedgraphic-23

Using ARIN WHOIS https://whois.arin.net/rest/net/NET-75-152-0-0-1/pft?s=75.153.170.0 gives Telus

pastedgraphic-22

Andrew-Clement commented 8 years ago

As for Colin's point above

We don't update asnums over time - whatever is entered as asn when the ip is added to the DB is final. this presents a potentially serious problem.

It would seem advisable to update the ASN assignments to our IPaddr data (raising again the thorny issue of incorporating a time dimension in the DB)

agamba commented 8 years ago

This is a long standing issue we have discussed before. I'm currently setting the environment in the new clone server, and I was thinking we could run some tests by actually trying to lookup again all the ips in table ip_address. This may take a few days but I believe can give us an indication of what assignations have changed since the time an ip was added.

Inspecting the logs of contribution trid=135826, note how in this case a more reliable way of knowing contributor ASN is the public ip collected at the moment of submission, but not necessarily part of the tracerotue. See details here. Note submitter_ip: "209.52.88.0",

https://www.ixmaps.ca/application/controller/show_tr_contribution.php?trid=135826