| … | |
… | |
| 2 | |
2 | |
| 3 | # APNIC refer: KRNIC (for 211.104.0.0) |
3 | # APNIC refer: KRNIC (for 211.104.0.0) |
| 4 | |
4 | |
| 5 | use Socket; |
5 | use Socket; |
| 6 | use Fcntl; |
6 | use Fcntl; |
| 7 | |
|
|
| 8 | use PApp::SQL; |
|
|
| 9 | |
7 | |
| 10 | use Coro; |
8 | use Coro; |
| 11 | use Coro::Event; |
9 | use Coro::Event; |
| 12 | use Coro::Semaphore; |
10 | use Coro::Semaphore; |
|
|
11 | use Coro::SemaphoreSet; |
| 13 | use Coro::Socket; |
12 | use Coro::Socket; |
|
|
13 | use Coro::Timer; |
|
|
14 | |
|
|
15 | use BerkeleyDB; |
| 14 | |
16 | |
| 15 | $Event::DIED = sub { |
17 | $Event::DIED = sub { |
| 16 | Event::verbose_exception_handler(@_); |
18 | Event::verbose_exception_handler(@_); |
| 17 | #Event::unloop_all(); |
19 | #Event::unloop_all(); |
| 18 | }; |
20 | }; |
| 19 | |
21 | |
|
|
22 | tie %netgeo::whois, BerkeleyDB::Btree, |
|
|
23 | -Env => $db_env, |
|
|
24 | -Filename => "whois", |
|
|
25 | -Flags => DB_CREATE, |
|
|
26 | or die "unable to create/open whois table"; |
|
|
27 | $netgeo::iprange = new BerkeleyDB::Btree |
|
|
28 | -Env => $db_env, |
|
|
29 | -Filename => "iprange", |
|
|
30 | -Flags => DB_CREATE, |
|
|
31 | or die "unable to create/open iprange table"; |
|
|
32 | |
| 20 | package Whois; |
33 | package Whois; |
| 21 | |
34 | |
| 22 | use PApp::SQL; |
|
|
| 23 | use Coro::Event; |
35 | use Coro::Event; |
| 24 | |
36 | |
| 25 | sub new { |
37 | sub new { |
| 26 | my $class = shift; |
38 | my $class = shift; |
| 27 | my $name = shift; |
39 | my $name = shift; |
| … | |
… | |
| 39 | $_[1]; |
51 | $_[1]; |
| 40 | } |
52 | } |
| 41 | |
53 | |
| 42 | sub whois_request { |
54 | sub whois_request { |
| 43 | my ($self, $query) = @_; |
55 | my ($self, $query) = @_; |
| 44 | my ($id, $whois); |
|
|
| 45 | |
56 | |
| 46 | my $st = sql_exec \($id, $whois), |
57 | my $id = "$self->{name}\x0$query"; |
| 47 | "select id, whois from whois |
58 | my $whois = $netgeo::whois{$id}; |
| 48 | where nic = ? and query = ?", |
|
|
| 49 | $self->{name}, $query; |
|
|
| 50 | |
59 | |
| 51 | unless ($st->fetch) { |
60 | unless (defined $whois) { |
|
|
61 | print "WHOIS($self->{name},$query)\n"; |
|
|
62 | |
| 52 | my $guard = $self->{maxjobs}->guard; |
63 | my $guard = $self->{maxjobs}->guard; |
| 53 | my $timeout = 5; |
64 | my $timeout = 5; |
| 54 | |
65 | |
| 55 | while () { |
66 | while () { |
| 56 | my $fh = new Coro::Socket |
67 | my $fh = new Coro::Socket |
| 57 | PeerAddr => $self->ip, |
68 | PeerAddr => $self->ip, |
| 58 | PeerPort => 'whois', |
69 | PeerPort => $self->{port} || "whois", |
| 59 | Timeout => 30; |
70 | Timeout => 30; |
| 60 | if ($fh) { |
71 | if ($fh) { |
| 61 | print $fh "$query\n"; |
72 | print $fh "$query\n"; |
| 62 | $fh->read($whois, 16*1024); # max 16k. whois stored |
73 | $fh->read($whois, 16*1024); # max 16k. whois stored |
| 63 | close $fh; |
74 | close $fh; |
| … | |
… | |
| 73 | $timeout *= 2; |
84 | $timeout *= 2; |
| 74 | $timeout = 1 if $timeout > 600; |
85 | $timeout = 1 if $timeout > 600; |
| 75 | } else { |
86 | } else { |
| 76 | last; |
87 | last; |
| 77 | } |
88 | } |
|
|
89 | } else { |
|
|
90 | # only retry once a minute |
|
|
91 | print STDERR "unable to connect to $self->{ip} ($self->{name}), retrying...\n"; |
|
|
92 | Coro::Timer::sleep 300; |
| 78 | } |
93 | } |
| 79 | } |
94 | } |
| 80 | |
95 | |
| 81 | sql_exec "replace into whois values (NULL,?,?,NULL,?,?)", |
96 | $netgeo::whois{$id} = $whois; |
| 82 | $self->{name}, $query, $whois, time; |
|
|
| 83 | |
|
|
| 84 | my $st = sql_exec \$id, |
|
|
| 85 | "select id from whois |
|
|
| 86 | where nic = ? and query = ?", |
|
|
| 87 | $self->{name}, $query; |
|
|
| 88 | $st->fetch or die; |
|
|
| 89 | } |
97 | } |
| 90 | |
98 | |
| 91 | $whois; |
99 | $whois; |
| 92 | } |
100 | } |
| 93 | |
101 | |
| 94 | package Whois::ARIN; |
102 | package Whois::ARIN; |
| 95 | |
103 | |
| 96 | use Date::Parse; |
104 | use Date::Parse; |
| 97 | use PApp::SQL; |
|
|
| 98 | |
105 | |
| 99 | use base Whois; |
106 | use base Whois; |
| 100 | |
107 | |
| 101 | sub sanitize { |
108 | sub sanitize { |
| 102 | local $_ = $_[1]; |
109 | local $_ = $_[1]; |
| … | |
… | |
| 113 | sub ip_request { |
120 | sub ip_request { |
| 114 | my ($self, $ip) = @_; |
121 | my ($self, $ip) = @_; |
| 115 | |
122 | |
| 116 | my $whois = $self->whois_request($ip); |
123 | my $whois = $self->whois_request($ip); |
| 117 | |
124 | |
| 118 | return () if $whois =~ /^No match/; |
125 | return if $whois =~ /^No match/; |
|
|
126 | return if $whois =~ /^\*de: This network range is not allocated to /; # APINIC e.g. 24.0.0.0 |
| 119 | |
127 | |
| 120 | if ($whois =~ /^To single out one record/m) { |
128 | if ($whois =~ /^To single out one record/m) { |
| 121 | my $handle; |
129 | my $handle; |
| 122 | while ($whois =~ /\G\S.*\(([A-Z0-9\-]+)\).*\n/mg) { |
130 | while ($whois =~ /\G\S.*\(([A-Z0-9\-]+)\).*\n/mg) { |
| 123 | $handle = $1; |
131 | $handle = $1; |
| 124 | #return if $handle =~ /-(RIPE|APNIC)/; # heuristic, bbut bad because ripe might not have better info |
132 | #return if $handle =~ /-(RIPE|APNIC)/; # heuristic, but bad because ripe might not have better info |
| 125 | } |
133 | } |
| 126 | $handle or die "$whois ($ip): unparseable multimatch\n"; |
134 | $handle or die "$whois ($ip): unparseable multimatch\n"; |
| 127 | $whois = $self->whois_request("!$handle"); |
135 | $whois = $self->whois_request("!$handle"); |
| 128 | } |
136 | } |
| 129 | |
137 | |
| … | |
… | |
| 165 | $whois; |
173 | $whois; |
| 166 | } |
174 | } |
| 167 | |
175 | |
| 168 | package Whois::RIPE; |
176 | package Whois::RIPE; |
| 169 | |
177 | |
| 170 | use PApp::SQL; |
178 | use Socket; |
| 171 | |
|
|
| 172 | use base Whois; |
179 | use base Whois; |
| 173 | |
180 | |
| 174 | sub sanitize { |
181 | sub sanitize { |
| 175 | local $_ = $_[1]; |
182 | local $_ = $_[1]; |
|
|
183 | |
| 176 | s/^%.*\n//gm; |
184 | s/^%.*\n//gm; |
| 177 | s/^\n+//; |
185 | s/^\n+//; |
| 178 | s/\n*$/\n/; |
186 | s/\n*$/\n/; |
|
|
187 | |
|
|
188 | s/^inetnum:\s+/*in: /gm; |
|
|
189 | s/^admin-c:\s+/*ac: /gm; |
|
|
190 | s/^tech-c:\s+/*tc: /gm; |
|
|
191 | s/^owner-c:\s+/*oc: /gm; |
|
|
192 | s/^country:\s+/*cy: /gm; |
|
|
193 | s/^phone:\s+/*ph: /gm; |
|
|
194 | s/^remarks:\s+/*rm: /gm; |
|
|
195 | s/^changed:\s+/*ch: /gm; |
|
|
196 | s/^created:\s+/*cr: /gm; |
|
|
197 | s/^address:\s+/*ad: /gm; |
|
|
198 | s/^status:\s+/*st: /gm; |
|
|
199 | s/^inetrev:\s+/*ir: /gm; |
|
|
200 | s/^nserver:\s+/*ns: /gm; |
|
|
201 | |
| 179 | $_; |
202 | $_; |
| 180 | } |
203 | } |
| 181 | |
204 | |
| 182 | sub ip_request { |
205 | sub ip_request { |
| 183 | my ($self, $ip) = @_; |
206 | my ($self, $ip) = @_; |
| 184 | |
207 | |
| 185 | my $whois = $self->whois_request("-FSTin $ip"); |
208 | my $whois = $self->whois_request("$self->{rflags}$ip"); |
|
|
209 | |
|
|
210 | $whois =~ s{ |
|
|
211 | (2[0-5][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9]) |
|
|
212 | (?:\. |
|
|
213 | (2[0-5][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9]) |
|
|
214 | (?:\. |
|
|
215 | (2[0-5][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9]) |
|
|
216 | (?:\. |
|
|
217 | (2[0-5][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9]) |
|
|
218 | )? |
|
|
219 | )? |
|
|
220 | )? |
|
|
221 | / |
|
|
222 | ([0-9]+) |
|
|
223 | }{ |
|
|
224 | my $ip = inet_aton sprintf "%d.%d.%d.%d", $1, $2, $3, $4; |
|
|
225 | my $net = 1 << (31 - $5); |
|
|
226 | my $mask = inet_aton 2 ** 32 - $net; |
|
|
227 | |
|
|
228 | my $ip1 = $ip & $mask; |
|
|
229 | my $ip2 = $ip1 | inet_aton $net * 2 - 1; |
|
|
230 | (inet_ntoa $ip1) . " - " . (inet_ntoa $ip2); |
|
|
231 | }gex; |
| 186 | |
232 | |
| 187 | $whois =~ /^\*in: 0\.0\.0\.0 - 255\.255\.255\.255/ |
233 | $whois =~ /^\*in: 0\.0\.0\.0 - 255\.255\.255\.255/ |
| 188 | and return; |
234 | and return; |
| 189 | |
235 | |
| 190 | $whois =~ /^\*ac: XXX0/m # 192.0.0.0 |
236 | $whois =~ /^\*ac: XXX0/m # 192.0.0.0 |
|
|
237 | and return; |
|
|
238 | |
|
|
239 | $whois =~ /^\*st: (?:ALLOCATED )?UNSPECIFIED/m |
| 191 | and return; |
240 | and return; |
| 192 | |
241 | |
| 193 | $whois =~ /^%ERROR:/m |
242 | $whois =~ /^%ERROR:/m |
| 194 | and return; |
243 | and return; |
| 195 | |
244 | |
| 196 | #while ($whois =~ s/^\*(?:ac|tc):\s+(\S+)\n//m) { |
245 | #while ($whois =~ s/^\*(?:ac|tc):\s+(\S+)\n//m) { |
| 197 | # $whois .= $self->whois_request("-FSTpn $1"); |
246 | # $whois .= $self->whois_request("-FSTpn $1"); |
| 198 | #} |
247 | #} |
| 199 | |
248 | |
|
|
249 | #$whois =~ s/^\*(?:pn|nh|mb|ch|so|rz|ny|st|rm):.*\n//mg; |
|
|
250 | |
|
|
251 | $whois =~ s/\n+$//; |
|
|
252 | |
|
|
253 | $whois; |
|
|
254 | } |
|
|
255 | |
|
|
256 | package Whois::RWHOIS; |
|
|
257 | |
|
|
258 | use base Whois; |
|
|
259 | |
|
|
260 | sub sanitize { |
|
|
261 | local $_ = $_[1]; |
|
|
262 | s/^%referral\s+/referral:/gm; |
|
|
263 | s/^network://gm; |
|
|
264 | s/^%.*\n//gm; |
|
|
265 | s/^\n+//m; |
|
|
266 | s/\n*$/\n/m; |
|
|
267 | |
|
|
268 | s/^(\S+):\s*/\L$1: /gm; |
|
|
269 | s/^ip-network-block:/*in:/gm; |
|
|
270 | s/^country-code:/*cy:/gm; |
|
|
271 | s/^tech-contact;i:/*tc:/gm; |
|
|
272 | s/^updated:/*ch:/gm; |
|
|
273 | s/^street-address:/*ad:/gm; |
|
|
274 | s/^org-name:/*rm:/gm; |
|
|
275 | s/^created:/*cr:/gm; |
|
|
276 | |
|
|
277 | $_; |
|
|
278 | } |
|
|
279 | |
|
|
280 | sub ip_request { |
|
|
281 | my ($self, $ip) = @_; |
|
|
282 | |
|
|
283 | my $whois = $self->whois_request("$ip"); |
|
|
284 | |
|
|
285 | $whois =~ /^\*in: 0\.0\.0\.0 - 255\.255\.255\.255/ |
|
|
286 | and return; |
|
|
287 | |
|
|
288 | $whois =~ /^\*ac: XXX0/m # 192.0.0.0 |
|
|
289 | and return; |
|
|
290 | |
|
|
291 | $whois =~ /^%ERROR:/m |
|
|
292 | and return; |
|
|
293 | |
|
|
294 | #while ($whois =~ s/^\*(?:ac|tc):\s+(\S+)\n//m) { |
|
|
295 | # $whois .= $self->whois_request("-FSTpn $1"); |
|
|
296 | #} |
|
|
297 | |
| 200 | $whois =~ s/^\*(?:pn|nh|mb|ch|so|rz|ny|st|rm):.*\n//mg; |
298 | $whois =~ s/^\*(?:pn|nh|mb|ch|so|rz|ny|st|rm):.*\n//mg; |
| 201 | |
299 | |
| 202 | $whois =~ s/\n+$//; |
300 | $whois =~ s/\n+$//; |
| 203 | |
301 | |
| 204 | $whois; |
302 | $whois; |
| 205 | } |
303 | } |
| 206 | |
304 | |
| 207 | package main; |
305 | package netgeo; |
|
|
306 | |
|
|
307 | use Socket; |
|
|
308 | use BerkeleyDB; |
| 208 | |
309 | |
| 209 | sub ip2int($) { |
310 | sub ip2int($) { |
| 210 | unpack "N", inet_aton $_[0]; |
311 | unpack "N", inet_aton $_[0]; |
| 211 | } |
312 | } |
| 212 | |
313 | |
| … | |
… | |
| 214 | inet_ntoa pack "N", $_[0]; |
315 | inet_ntoa pack "N", $_[0]; |
| 215 | } |
316 | } |
| 216 | |
317 | |
| 217 | our %WHOIS; |
318 | our %WHOIS; |
| 218 | |
319 | |
| 219 | $WHOIS{ARIN} = new Whois::ARIN ARIN => "whois.arin.net", maxjobs => 12; |
320 | #$WHOIS{ARIN} = new Whois::ARIN ARIN => "whois.arin.net", port => 43, maxjobs => 12; |
|
|
321 | $WHOIS{ARIN} = new Whois::RWHOIS ARIN => "rwhois.arin.net", port => 4321, maxjobs => 12; |
| 220 | $WHOIS{RIPE} = new Whois::RIPE RIPE => "whois.ripe.net", maxjobs => 20; |
322 | $WHOIS{RIPE} = new Whois::RIPE RIPE => "whois.ripe.net", port => 43, rflags => "-FTin ", maxjobs => 20; |
|
|
323 | $WHOIS{APNIC} = new Whois::RIPE APNIC => "whois.apnic.net", port => 43, rflags => "-FTin ", maxjobs => 20; |
| 221 | $WHOIS{APNIC} = new Whois::RIPE APNIC => "whois.apnic.net", maxjobs => 20; |
324 | $WHOIS{LACNIC} = new Whois::RIPE LACNIC => "whois.lacnic.net", port => 43, maxjobs => 20; |
|
|
325 | |
|
|
326 | $whoislock = new Coro::SemaphoreSet; |
| 222 | |
327 | |
| 223 | sub ip_request { |
328 | sub ip_request { |
| 224 | my $ip = $_[0]; |
329 | my $ip = $_[0]; |
| 225 | my $_ip = ip2int($ip); |
|
|
| 226 | |
330 | |
| 227 | my $st = sql_exec \my($whois, $ip0), |
331 | my $guard = $whoislock->guard($ip); |
| 228 | "select data, ip0 from iprange |
|
|
| 229 | where ? <= ip1 |
|
|
| 230 | having ip0 <= ? |
|
|
| 231 | order by ip1 |
|
|
| 232 | limit 1", |
|
|
| 233 | $_ip, $_ip; |
|
|
| 234 | |
332 | |
| 235 | unless ($st->fetch) { |
333 | my $c = $iprange->db_cursor; |
| 236 | my ($arin, $ripe, $apnic); |
334 | my $v; |
| 237 | |
335 | |
| 238 | $whois = $WHOIS{APNIC}->ip_request($ip) |
336 | if (!$c->c_get((inet_aton $ip), $v, DB_SET_RANGE)) { |
| 239 | || $WHOIS{RIPE} ->ip_request($ip) |
337 | my ($ip0, $ip1, $whois) = split /\x0/, $v; |
| 240 | || $WHOIS{ARIN} ->ip_request($ip); |
|
|
| 241 | |
|
|
| 242 | $whois =~ /^\*in: ([0-9.]+)\s+-\s+([0-9.]+)\s*$/mi |
|
|
| 243 | or warn "$whois($ip): no addresses found\n"; |
|
|
| 244 | $whois =~ /^\*in: ([0-9.]+)\s+-\s+([0-9.]+)\s*$/mi |
|
|
| 245 | or return; |
|
|
| 246 | |
|
|
| 247 | $whois =~ /^\*in: ([0-9.]+)\s+-\s+([0-9.]+)\s*$/mi |
|
|
| 248 | or die "$whois($ip): no addresses found\n"; |
|
|
| 249 | |
|
|
| 250 | my ($ip0, $ip1) = ($1, $2); |
|
|
| 251 | |
|
|
| 252 | my $_ip0 = ip2int($ip0); |
338 | my $_ip = ip2int $ip; |
| 253 | my $_ip1 = ip2int($ip1); |
339 | if ($ip0 <= $_ip && $_ip <= $ip1) { |
| 254 | |
340 | return $whois; |
| 255 | if ($_ip0 + 256 < $_ip1) { |
|
|
| 256 | $_ip = $_ip & 0xffffff00; |
|
|
| 257 | $_ip0 = $_ip if $_ip0 < $_ip; |
|
|
| 258 | $_ip1 = $_ip + 255 if $_ip1 > $_ip + 255; |
|
|
| 259 | } |
341 | } |
| 260 | |
|
|
| 261 | sql_exec "replace into iprange values (?, ?, NULL, ?)", |
|
|
| 262 | $_ip0, $_ip1, $whois; |
|
|
| 263 | |
|
|
| 264 | #print "$ip ($ip0, $ip1 ($_ip0, $_ip1)\n$whois\n"; |
|
|
| 265 | } |
342 | } |
| 266 | |
343 | |
| 267 | $whois; |
344 | my ($arin, $ripe, $apnic); |
| 268 | } |
|
|
| 269 | |
345 | |
|
|
346 | $whois = $WHOIS{RIPE}->ip_request($ip) |
|
|
347 | || $WHOIS{APNIC} ->ip_request($ip) |
|
|
348 | || $WHOIS{ARIN} ->ip_request($ip) |
|
|
349 | # || $WHOIS{LACNIC}->ip_request($ip) |
|
|
350 | ; |
| 270 | |
351 | |
|
|
352 | $whois =~ /^\*in: ([0-9.]+)\s+-\s+([0-9.]+)\s*$/mi |
|
|
353 | or do { warn "$whois($ip): no addresses found\n", last }; |
| 271 | |
354 | |
|
|
355 | my ($ip0, $ip1) = ($1, $2); |
|
|
356 | |
|
|
357 | my $_ip = ip2int($ip); |
|
|
358 | my $_ip0 = ip2int($ip0); |
|
|
359 | my $_ip1 = ip2int($ip1); |
|
|
360 | |
|
|
361 | if ($_ip0 + 256 < $_ip1) { |
|
|
362 | $_ip = $_ip & 0xffffff00; |
|
|
363 | $_ip0 = $_ip if $_ip0 < $_ip; |
|
|
364 | $_ip1 = $_ip + 255 if $_ip1 > $_ip + 255; |
|
|
365 | } |
|
|
366 | |
|
|
367 | $iprange->db_put((pack "N", $_ip1), (join "\x0", $_ip0, $_ip1, $whois)); |
|
|
368 | (tied %whois)->db_sync; |
|
|
369 | $iprange->db_sync; |
|
|
370 | |
|
|
371 | $whois; |
|
|
372 | } |
|
|
373 | |
|
|
374 | if (0) { |
|
|
375 | #print ip_request "68.52.164.8"; # goof |
|
|
376 | #print "\n\n"; |
|
|
377 | #print ip_request "200.202.220.222"; # lacnic |
|
|
378 | #print "\n\n"; |
|
|
379 | #print ip_request "62.116.167.250"; |
|
|
380 | #print "\n\n"; |
|
|
381 | #print ip_request "133.11.128.254"; # jp |
|
|
382 | #print "\n\n"; |
|
|
383 | print ip_request "80.131.153.93"; |
|
|
384 | print "\n\n"; |
|
|
385 | } |
|
|
386 | |
|
|
387 | 1; |
|
|
388 | |
|
|
389 | |
