Re: Identifying when netblocks have been assigned

2008-09-13 Thread Stephen Sprunk

Frank Bulk wrote:

When I do that it lists the organization's AS, but not any netblocks
associated with that AS.

Frank

-Original Message-
From: Jake Mertel [mailto:[EMAIL PROTECTED] 


Frank,

Add the > operator in front of the organizations ARIN ID when you do
your WHOIS query and it will show all of the resources allocated to that
organization.
  


Keep in mind that the "> OrgID" trick only works for allocations or 
assignments made directly by ARIN; it won't necessarily show you 
everything that was SWIPed to them, since many SWIPs are not tagged with 
an OrgID.  To find those, you have to search on the name of the customer 
and hope it shows up correctly in the CustName field.


Also, many companies end up with lots of OrgIDs, and many of them may 
not have the correct current name due to M&A activity.  Finding them all 
may take a while and isn't easily automated.


S



RE: Identifying when netblocks have been assigned

2008-09-13 Thread Frank Bulk
No problem, I had my coffee 2 hours ago.

1) I would prefer e-mail, and ideally on-demand querying from a web form.
And even more pie in the sky, something like Google Trends (i.e.
http://www.google.com/trends?q=hurricane+katrina&ctab=0&geo=all&date=all)
that shows the quantity of IP addresses that are being advertised over time.
2) Basically I would sign up for certain AS' and be informed when new blocks
are added, or when blocks stop being advertised (for a full 24-hour period,
I don't think there's value in seeing when it's withdrawn and re-advertised
in one day).  There might be some people that want to know when a block is
first advertised, but that's less likely unless they're tracking the
de-BOGON announcements.

Regards,

Frank

-Original Message-
From: Bill Woodcock [mailto:[EMAIL PROTECTED] 
Sent: Saturday, September 13, 2008 12:57 PM
To: Frank Bulk
Cc: [EMAIL PROTECTED]; Vijay Kumar Adhikari; nanog@nanog.org
Subject: Re: Identifying when netblocks have been assigned

  On Sat, 13 Sep 2008, Bill Woodcock wrote:
> By that, I mean that they could be run daily, and specific results
emailed
> to people who were interested in following the allocation patterns for
> specific organizations, any time there was a match.

Following up on my own post for the second time tells me that I'm posting
too early in the morning, or without the recommended seven-second
broadcast delay between brain and fingers, but...  My colleagues have
reminded me that we already built this system two years ago, and it
produces an RSS feed, rather than email results.  Also, that we hadn't
done as much as we should do to provide filtering tools to narrow down the
results.  So, two questions for the community:

1) Would people prefer to receive these results via email, or RSS, or
   some other mechanism?

2) What would the structure of the query or filter look like, ideally?
   What key would you like to be querying on, and how would you like
   the results focused?

-Bill





RE: Identifying when netblocks have been assigned

2008-09-13 Thread Frank Bulk
Ok, so not so simple. =)

I'm not familiar with the layout of PCH's data (I did find some .gz files,
so I presume that's the data that's gathered on a daily basis), but if I
was, I would have to take the divide-and-conquer approach for a certain AS
to find out when a block was first announced.  

I'm guessing that I would have to do the hard work.  Perhaps Renesys is
already doing this? (but for a fee).

Regards,

Frank

-Original Message-
From: Bill Woodcock [mailto:[EMAIL PROTECTED] 
Sent: Saturday, September 13, 2008 12:47 PM
To: Frank Bulk
Cc: [EMAIL PROTECTED]; Vijay Kumar Adhikari; nanog@nanog.org
Subject: Re: Identifying when netblocks have been assigned

  On Sat, 13 Sep 2008, Bill Woodcock wrote:
> Those are both very simple reports to run from PCH's existing
databases
> and data-feeds.

By that, I mean that they could be run daily, and specific results emailed
to people who were interested in following the allocation patterns for
specific organizations, any time there was a match.

-Bill





Re: Identifying when netblocks have been assigned

2008-09-13 Thread Bill Woodcock
  On Sat, 13 Sep 2008, Bill Woodcock wrote:
> By that, I mean that they could be run daily, and specific results 
emailed 
> to people who were interested in following the allocation patterns for 
> specific organizations, any time there was a match.

Following up on my own post for the second time tells me that I'm posting 
too early in the morning, or without the recommended seven-second 
broadcast delay between brain and fingers, but...  My colleagues have 
reminded me that we already built this system two years ago, and it 
produces an RSS feed, rather than email results.  Also, that we hadn't 
done as much as we should do to provide filtering tools to narrow down the 
results.  So, two questions for the community:

1) Would people prefer to receive these results via email, or RSS, or 
   some other mechanism?

2) What would the structure of the query or filter look like, ideally?
   What key would you like to be querying on, and how would you like
   the results focused?

-Bill




RE: Identifying when netblocks have been assigned

2008-09-13 Thread Frank Bulk
When I do that it lists the organization's AS, but not any netblocks
associated with that AS.

Frank

-Original Message-
From: Jake Mertel [mailto:[EMAIL PROTECTED] 
Sent: Saturday, September 13, 2008 10:50 AM
To: Frank Bulk
Cc: nanog@nanog.org
Subject: Re: Identifying when netblocks have been assigned

Frank,

Add the > operator in front of the organizations ARIN ID when you do
your WHOIS query and it will show all of the resources allocated to that
organization.

--
Regards,

Jake Mertel
Nobis Technology Group, L.L.C.

Frank Bulk wrote:
> Perhaps there's no answer to this, or it's obvious and I ought to know.
>
> How can I find out when ARIN or the applicable registry has assigned a
block
> to a certain organization, and I don't know the block, just the
> organization.
> If that's not possible, is there a site/way that has a timeline for the
> first time a certain AS announced a block?
>
> Frank
>
>
>





Re: Identifying when netblocks have been assigned

2008-09-13 Thread Bill Woodcock
  On Sat, 13 Sep 2008, Bill Woodcock wrote:
> Those are both very simple reports to run from PCH's existing databases 
> and data-feeds.

By that, I mean that they could be run daily, and specific results emailed 
to people who were interested in following the allocation patterns for 
specific organizations, any time there was a match.

-Bill




Re: Identifying when netblocks have been assigned

2008-09-13 Thread Bill Woodcock
  On Sat, 13 Sep 2008, Frank Bulk wrote:
> Perhaps there's no answer to this, or it's obvious and I ought to know.
> How can I find out when ARIN or the applicable registry has assigned a 
block
> to a certain organization, and I don't know the block, just the
> organization.
> If that's not possible, is there a site/way that has a timeline for the
> first time a certain AS announced a block?

Those are both very simple reports to run from PCH's existing databases 
and data-feeds.  The only tricky part is how you specify the organization 
name...  Are you planning on using the RIR OrgID, or an exact-match on the 
organization name, or a substring or regex match?  Or would you like 
something that tries to map through origin AS?

-Bill




Re: Identifying when netblocks have been assigned

2008-09-13 Thread Jake Mertel

Frank,

Add the > operator in front of the organizations ARIN ID when you do 
your WHOIS query and it will show all of the resources allocated to that 
organization.


--
Regards,

Jake Mertel
Nobis Technology Group, L.L.C.

Frank Bulk wrote:

Perhaps there's no answer to this, or it's obvious and I ought to know.

How can I find out when ARIN or the applicable registry has assigned a block
to a certain organization, and I don't know the block, just the
organization.
If that's not possible, is there a site/way that has a timeline for the
first time a certain AS announced a block?

Frank


  





Identifying when netblocks have been assigned

2008-09-13 Thread Frank Bulk
Perhaps there's no answer to this, or it's obvious and I ought to know.

How can I find out when ARIN or the applicable registry has assigned a block
to a certain organization, and I don't know the block, just the
organization.
If that's not possible, is there a site/way that has a timeline for the
first time a certain AS announced a block?

Frank