mailing list archives
Re: [NSE] ip-geolocation
From: Gorjan Petrovski <mogi57 () gmail com>
Date: Fri, 10 Jun 2011 22:34:20 +0200
Thanks for your reply.
Your program is very cool indeed. I like how instead of relying on
external services it gathers data directly from the sources, like a
fast localized whois, and the parsing is really truly fast.
Unfortunately because it stores the data locally(and it's a lot of
data) I'm afraid it won't be a fitting addition for Nmap. Apart from
that I can see that it relies on the Maxmind databases for
geolocation, and I've already implemented that. As I mentioned in my
first email, my implementation for parsing the Maxmind databases is
likely to be dropped because of unneeded redundancy and the fact that
the user has to download the databases. Nevertheless I'll discuss your
method of whois with the NSE mentors.
Hopefully, someone will answer these posts too.
As for me, I'm totally keeping the program for future use :)
On Fri, Jun 10, 2011 at 7:43 PM, Jacob Appelbaum <jacob () appelbaum net> wrote:
On Fri, Jun 10, 2011 at 3:36 PM, Gorjan Petrovski <mogi57 () gmail com> wrote:
Please find attached the ip-geolocation script. I've implemented IP
geolocation lookups on 4 web services(Geoplugin, IPInfoDB, Geobytes
and Quova) and a query against a Maxmind database based on the API
The usage is as follows:
nmap --script ip-geolocation <target> [--script-args
As you can see there are many arguments but all of them are optional.
I've implemented a program that has quite a lot of metadata locally and
would be useful for use in your script:
This will provide you with RIR, LIR, GeoIP and other sources of data. If
you'd like me to write a specific output format, I'd be happy to do it.
All the best,
Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/