… | |
… | |
6 | use Fcntl; |
6 | use Fcntl; |
7 | |
7 | |
8 | use Coro; |
8 | use Coro; |
9 | use Coro::Event; |
9 | use Coro::Event; |
10 | use Coro::Semaphore; |
10 | use Coro::Semaphore; |
|
|
11 | use Coro::SemaphoreSet; |
11 | use Coro::Socket; |
12 | use Coro::Socket; |
|
|
13 | |
|
|
14 | use BerkeleyDB; |
12 | |
15 | |
13 | $Event::DIED = sub { |
16 | $Event::DIED = sub { |
14 | Event::verbose_exception_handler(@_); |
17 | Event::verbose_exception_handler(@_); |
15 | #Event::unloop_all(); |
18 | #Event::unloop_all(); |
16 | }; |
19 | }; |
… | |
… | |
60 | my $timeout = 5; |
63 | my $timeout = 5; |
61 | |
64 | |
62 | while () { |
65 | while () { |
63 | my $fh = new Coro::Socket |
66 | my $fh = new Coro::Socket |
64 | PeerAddr => $self->ip, |
67 | PeerAddr => $self->ip, |
65 | PeerPort => 'whois', |
68 | PeerPort => $self->{port} || "whois", |
66 | Timeout => 30; |
69 | Timeout => 30; |
67 | if ($fh) { |
70 | if ($fh) { |
68 | print $fh "$query\n"; |
71 | print $fh "$query\n"; |
69 | $fh->read($whois, 16*1024); # max 16k. whois stored |
72 | $fh->read($whois, 16*1024); # max 16k. whois stored |
70 | close $fh; |
73 | close $fh; |
… | |
… | |
164 | $whois; |
167 | $whois; |
165 | } |
168 | } |
166 | |
169 | |
167 | package Whois::RIPE; |
170 | package Whois::RIPE; |
168 | |
171 | |
|
|
172 | use Socket; |
169 | use base Whois; |
173 | use base Whois; |
170 | |
174 | |
171 | sub sanitize { |
175 | sub sanitize { |
172 | local $_ = $_[1]; |
176 | local $_ = $_[1]; |
|
|
177 | |
173 | s/^%.*\n//gm; |
178 | s/^%.*\n//gm; |
174 | s/^\n+//; |
179 | s/^\n+//; |
175 | s/\n*$/\n/; |
180 | s/\n*$/\n/; |
|
|
181 | |
|
|
182 | s/^inetnum:\s+/*in: /gm; |
|
|
183 | s/^admin-c:\s+/*ac: /gm; |
|
|
184 | s/^tech-c:\s+/*tc: /gm; |
|
|
185 | s/^owner-c:\s+/*oc: /gm; |
|
|
186 | s/^country:\s+/*cy: /gm; |
|
|
187 | s/^phone:\s+/*ph: /gm; |
|
|
188 | s/^remarks:\s+/*re: /gm; |
|
|
189 | s/^changed:\s+/*ch: /gm; |
|
|
190 | s/^created:\s+/*cr: /gm; |
|
|
191 | s/^address:\s+/*ad: /gm; |
|
|
192 | s/^status:\s+/*st: /gm; |
|
|
193 | s/^inetrev:\s+/*ir: /gm; |
|
|
194 | s/^nserver:\s+/*ns: /gm; |
|
|
195 | |
176 | $_; |
196 | $_; |
177 | } |
197 | } |
178 | |
198 | |
179 | sub ip_request { |
199 | sub ip_request { |
180 | my ($self, $ip) = @_; |
200 | my ($self, $ip) = @_; |
181 | |
201 | |
182 | my $whois = $self->whois_request("-FSTin $ip"); |
202 | my $whois = $self->whois_request("$self->{rflags}$ip"); |
|
|
203 | |
|
|
204 | $whois =~ s{ |
|
|
205 | (2[0-5][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9]) |
|
|
206 | (?:\. |
|
|
207 | (2[0-5][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9]) |
|
|
208 | (?:\. |
|
|
209 | (2[0-5][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9]) |
|
|
210 | (?:\. |
|
|
211 | (2[0-5][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9]) |
|
|
212 | )? |
|
|
213 | )? |
|
|
214 | )? |
|
|
215 | / |
|
|
216 | ([0-9]+) |
|
|
217 | }{ |
|
|
218 | my $ip = inet_aton sprintf "%d.%d.%d.%d", $1, $2, $3, $4; |
|
|
219 | my $net = 1 << (31 - $5); |
|
|
220 | my $mask = inet_aton 2 ** 32 - $net; |
|
|
221 | |
|
|
222 | my $ip1 = $ip & $mask; |
|
|
223 | my $ip2 = $ip1 | inet_aton $net * 2 - 1; |
|
|
224 | (inet_ntoa $ip1) . " - " . (inet_ntoa $ip2); |
|
|
225 | }gex; |
183 | |
226 | |
184 | $whois =~ /^\*in: 0\.0\.0\.0 - 255\.255\.255\.255/ |
227 | $whois =~ /^\*in: 0\.0\.0\.0 - 255\.255\.255\.255/ |
185 | and return; |
228 | and return; |
186 | |
229 | |
187 | $whois =~ /^\*ac: XXX0/m # 192.0.0.0 |
230 | $whois =~ /^\*ac: XXX0/m # 192.0.0.0 |
|
|
231 | and return; |
|
|
232 | |
|
|
233 | $whois =~ /^\*st: (?:ALLOCATED )?UNSPECIFIED/m |
188 | and return; |
234 | and return; |
189 | |
235 | |
190 | $whois =~ /^%ERROR:/m |
236 | $whois =~ /^%ERROR:/m |
191 | and return; |
237 | and return; |
192 | |
238 | |
193 | #while ($whois =~ s/^\*(?:ac|tc):\s+(\S+)\n//m) { |
239 | #while ($whois =~ s/^\*(?:ac|tc):\s+(\S+)\n//m) { |
194 | # $whois .= $self->whois_request("-FSTpn $1"); |
240 | # $whois .= $self->whois_request("-FSTpn $1"); |
195 | #} |
241 | #} |
196 | |
242 | |
|
|
243 | #$whois =~ s/^\*(?:pn|nh|mb|ch|so|rz|ny|st|rm):.*\n//mg; |
|
|
244 | |
|
|
245 | $whois =~ s/\n+$//; |
|
|
246 | |
|
|
247 | $whois; |
|
|
248 | } |
|
|
249 | |
|
|
250 | package Whois::RWHOIS; |
|
|
251 | |
|
|
252 | use base Whois; |
|
|
253 | |
|
|
254 | sub sanitize { |
|
|
255 | local $_ = $_[1]; |
|
|
256 | s/^%referral\s+/referral:/gm; |
|
|
257 | s/^network://gm; |
|
|
258 | s/^%.*\n//gm; |
|
|
259 | s/^\n+//m; |
|
|
260 | s/\n*$/\n/m; |
|
|
261 | |
|
|
262 | s/^(\S+):\s*/\L$1: /gm; |
|
|
263 | s/^ip-network-block:/*in:/gm; |
|
|
264 | s/^country-code:/*cy:/gm; |
|
|
265 | s/^tech-contact;i:/*tc:/gm; |
|
|
266 | s/^updated:/*ch:/gm; |
|
|
267 | s/^street-address:/*ad:/gm; |
|
|
268 | s/^org-name:/*re:/gm; |
|
|
269 | s/^created:/*cr:/gm; |
|
|
270 | |
|
|
271 | $_; |
|
|
272 | } |
|
|
273 | |
|
|
274 | sub ip_request { |
|
|
275 | my ($self, $ip) = @_; |
|
|
276 | |
|
|
277 | my $whois = $self->whois_request("$ip"); |
|
|
278 | |
|
|
279 | $whois =~ /^\*in: 0\.0\.0\.0 - 255\.255\.255\.255/ |
|
|
280 | and return; |
|
|
281 | |
|
|
282 | $whois =~ /^\*ac: XXX0/m # 192.0.0.0 |
|
|
283 | and return; |
|
|
284 | |
|
|
285 | $whois =~ /^%ERROR:/m |
|
|
286 | and return; |
|
|
287 | |
|
|
288 | #while ($whois =~ s/^\*(?:ac|tc):\s+(\S+)\n//m) { |
|
|
289 | # $whois .= $self->whois_request("-FSTpn $1"); |
|
|
290 | #} |
|
|
291 | |
197 | $whois =~ s/^\*(?:pn|nh|mb|ch|so|rz|ny|st|rm):.*\n//mg; |
292 | $whois =~ s/^\*(?:pn|nh|mb|ch|so|rz|ny|st|rm):.*\n//mg; |
198 | |
293 | |
199 | $whois =~ s/\n+$//; |
294 | $whois =~ s/\n+$//; |
200 | |
295 | |
201 | $whois; |
296 | $whois; |
202 | } |
297 | } |
203 | |
298 | |
204 | package netgeo; |
299 | package netgeo; |
205 | |
300 | |
|
|
301 | use Socket; |
206 | use BerkeleyDB; |
302 | use BerkeleyDB; |
207 | use Socket; |
|
|
208 | |
303 | |
209 | sub ip2int($) { |
304 | sub ip2int($) { |
210 | unpack "N", inet_aton $_[0]; |
305 | unpack "N", inet_aton $_[0]; |
211 | } |
306 | } |
212 | |
307 | |
… | |
… | |
214 | inet_ntoa pack "N", $_[0]; |
309 | inet_ntoa pack "N", $_[0]; |
215 | } |
310 | } |
216 | |
311 | |
217 | our %WHOIS; |
312 | our %WHOIS; |
218 | |
313 | |
219 | $WHOIS{ARIN} = new Whois::ARIN ARIN => "whois.arin.net", maxjobs => 12; |
314 | #$WHOIS{ARIN} = new Whois::ARIN ARIN => "whois.arin.net", port => 43, maxjobs => 12; |
|
|
315 | $WHOIS{ARIN} = new Whois::RWHOIS ARIN => "rwhois.arin.net", port => 4321, maxjobs => 12; |
220 | $WHOIS{RIPE} = new Whois::RIPE RIPE => "whois.ripe.net", maxjobs => 20; |
316 | $WHOIS{RIPE} = new Whois::RIPE RIPE => "whois.ripe.net", port => 43, rflags => "-FSTin ", maxjobs => 20; |
|
|
317 | $WHOIS{APNIC} = new Whois::RIPE APNIC => "whois.apnic.net", port => 43, rflags => "-FSTin ", maxjobs => 20; |
221 | $WHOIS{APNIC} = new Whois::RIPE APNIC => "whois.apnic.net", maxjobs => 20; |
318 | $WHOIS{LACNIC} = new Whois::RIPE LACNIC => "whois.lacnic.net", port => 43, maxjobs => 20; |
|
|
319 | |
|
|
320 | $whoislock = new Coro::SemaphoreSet; |
222 | |
321 | |
223 | sub ip_request { |
322 | sub ip_request { |
224 | my $ip = $_[0]; |
323 | my $ip = $_[0]; |
|
|
324 | |
|
|
325 | my $guard = $whoislock->guard($ip); |
225 | |
326 | |
226 | my $c = $iprange->db_cursor; |
327 | my $c = $iprange->db_cursor; |
227 | my $v; |
328 | my $v; |
228 | |
329 | |
229 | if (!$c->c_get((inet_aton $ip), $v, DB_SET_RANGE)) { |
330 | if (!$c->c_get((inet_aton $ip), $v, DB_SET_RANGE)) { |
230 | my ($ip0, $ip1, $whois) = split /\x0/, $v; |
331 | my ($ip0, $ip1, $whois) = split /\x0/, $v; |
231 | my $_ip = ip2int $ip; |
332 | my $_ip = ip2int $ip; |
232 | print "looked for $_ip, found $ip0, $ip1 ", length($v),"\n"; |
|
|
233 | if ($ip0 <= $_ip && $_ip <= $ip1) { |
333 | if ($ip0 <= $_ip && $_ip <= $ip1) { |
234 | return $whois; |
334 | return $whois; |
235 | } |
335 | } |
236 | } |
336 | } |
237 | |
337 | |
238 | print "looked for $ip, ONLY found $v->[0], $v->[1]\n"; |
|
|
239 | |
|
|
240 | my ($arin, $ripe, $apnic); |
338 | my ($arin, $ripe, $apnic); |
241 | |
339 | |
242 | $whois = $WHOIS{APNIC}->ip_request($ip) |
340 | $whois = $WHOIS{RIPE}->ip_request($ip) |
|
|
341 | || $WHOIS{LACNIC}->ip_request($ip) |
243 | || $WHOIS{RIPE} ->ip_request($ip) |
342 | || $WHOIS{APNIC} ->ip_request($ip) |
244 | || $WHOIS{ARIN} ->ip_request($ip); |
343 | || $WHOIS{ARIN} ->ip_request($ip) |
|
|
344 | ; |
245 | |
345 | |
246 | $whois =~ /^\*in: ([0-9.]+)\s+-\s+([0-9.]+)\s*$/mi |
346 | $whois =~ /^\*in: ([0-9.]+)\s+-\s+([0-9.]+)\s*$/mi |
247 | or do { warn "$whois($ip): no addresses found\n", last }; |
347 | or do { warn "$whois($ip): no addresses found\n", last }; |
248 | |
348 | |
249 | my ($ip0, $ip1) = ($1, $2); |
349 | my ($ip0, $ip1) = ($1, $2); |
… | |
… | |
256 | $_ip = $_ip & 0xffffff00; |
356 | $_ip = $_ip & 0xffffff00; |
257 | $_ip0 = $_ip if $_ip0 < $_ip; |
357 | $_ip0 = $_ip if $_ip0 < $_ip; |
258 | $_ip1 = $_ip + 255 if $_ip1 > $_ip + 255; |
358 | $_ip1 = $_ip + 255 if $_ip1 > $_ip + 255; |
259 | } |
359 | } |
260 | |
360 | |
261 | print "setting entry ($_ip0, $_ip, $_ip1)\n"; |
|
|
262 | $iprange->db_put((pack "N", $_ip1), (join "\x0", $_ip0, $_ip1, $whois)); |
361 | $iprange->db_put((pack "N", $_ip1), (join "\x0", $_ip0, $_ip1, $whois)); |
263 | (tied %whois)->db_sync; |
362 | (tied %whois)->db_sync; |
264 | $iprange->db_sync; |
363 | $iprange->db_sync; |
265 | |
364 | |
266 | $whois; |
365 | $whois; |
267 | } |
366 | } |
268 | |
367 | |
|
|
368 | if (0) { |
|
|
369 | #print ip_request "68.52.164.8"; # goof |
|
|
370 | #print "\n\n"; |
|
|
371 | #print ip_request "200.202.220.222"; # lacnic |
|
|
372 | #print "\n\n"; |
|
|
373 | #print ip_request "62.116.167.250"; |
|
|
374 | #print "\n\n"; |
|
|
375 | #print ip_request "133.11.128.254"; # jp |
|
|
376 | #print "\n\n"; |
|
|
377 | #print ip_request "151.197.52.251"; |
|
|
378 | #print "\n\n"; |
|
|
379 | } |
269 | |
380 | |
|
|
381 | 1; |
270 | |
382 | |
|
|
383 | |