Printing Country Codes

Pablo.Rebollo at ece.uprm.edu Pablo.Rebollo at ece.uprm.edu
Sat Dec 29 13:04:51 EST 2007


Hi,

I was testing country codes feature and found that isn't working properly.
 Here is an example:

root at nsm:~# ralabel -n -S localhost -T 1 -s sco dco saddr sport daddr
dport - udp and port domain
sCo dCo            SrcAddr  Sport            DstAddr  Dport
 EU  EU    136.145.115.194.48782        136.145.57.3.53
 EU  SE       136.145.57.3.35421      194.146.106.42.53
 EU           136.145.57.3.35421          137.39.1.3.53
 EU  PT       136.145.57.3.35421        193.136.7.17.53
 EU  NL       136.145.57.3.35421      193.239.90.130.53
 EU  RU       136.145.57.3.35421         194.67.57.4.53
 EU           136.145.57.3.35421      63.209.144.178.53
 FR  EU     193.252.149.16.32780        136.145.57.3.53
     EU      216.40.221.10.1029         136.145.58.3.53
...
...

I found the following:

1) Network 136.145.0.0/16 has been associated to EU and not to PR.
2) Network 137.39.0.0/16 hasn't been associated to US.
3) Network 63.208.0.0/13 hasn't been associated to US.
4) Network 216.40.192.0/18 hasn't been associated to US.

I ran ragetcountrycodes.sh to generate a new delegated-ipv4-latest file
and got the same results.

Best regards,

Pablo J. Rebollo

----
>From delegated-ipv4-latest:
delegated-arin-latest:arin|PR|ipv4|136.145.0.0|65536|19890829|assigned
delegated-arin-latest:arin|US|ipv4|137.39.0.0|65536|19891025|assigned
delegated-arin-latest:arin|US|ipv4|63.208.0.0|524288|19990528|allocated
delegated-arin-latest:arin|US|ipv4|216.40.192.0|16384|20001005|allocated




More information about the argus mailing list