[
https://issues.apache.org/jira/browse/NIFI-1971?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15420972#comment-15420972
]
ASF GitHub Bot commented on NIFI-1971:
--------------------------------------
Github user trixpan commented on the issue:
https://github.com/apache/nifi/pull/858
# Note to reviewers: #
This is a logging pipeline focused processor that should be capable of
reaching to a Whois server and grabbing information that can be used to enrich
data.
The junit uses powermockito to prevent internet access dependency during
build, however, real world testing can be done against the following Whois
based APIs:
1. http://www.team-cymru.org/IP-ASN-mapping.html
2. https://www.shadowserver.org/wiki/pmwiki.php/Services/IP-BGP#toc4
3. http://www.pwhois.org/webquery.who
Please shout in case you have questions.
> Create a batch capable pseudo-whois ("netcat") enrichment Processor
> -------------------------------------------------------------------
>
> Key: NIFI-1971
> URL: https://issues.apache.org/jira/browse/NIFI-1971
> Project: Apache NiFi
> Issue Type: Improvement
> Affects Versions: 1.0.0, 0.7.0
> Reporter: Andre
> Assignee: Andre
> Fix For: 1.1.0
>
>
> While the QueryDNS created can be used on low to medium volume enrichment and
> to licensed DNS based lookups (e.g. commercial use of SpamHaus) many
> enrichment providers prefer the use of bulk queries using pseudo whois API
> (a.k.a. netcat interface).
> as documented
> [here|https://www.shadowserver.org/wiki/pmwiki.php/Services/IP-BGP#toc6] the
> bulk interfaces work by connecting to port 43/TCP and sending a payload like:
> {code}
> begin origin
> 4.5.4.3
> 17.112.152.32
> 208.77.188.166
> end
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
