Vulnerability Development: Re: Publishing Nimda Logs

["Bernie Cosell" <bernie () fantasyfarm com>]

On 8 May 2002, at 7:09, Laurence Brockman wrote:

> Whois works great...
Except for one thing: these days it will often give you incorrect 
information.  The reason has to do with the crowding of IPv4 space and 
ARIN having an inconsistent policy.

On the one hand, they won't give you new Class-Cs unless you can show 
that you're efficiently using the IP addrs you already have.  That's fine 
and sensible, and it means that ISPs are now giving their fat-pipe 
subscribers 29s or 28's or the like instead of just a no-brainer-24.  BUT 
simultaneously, ARIN will not allow an IP block smaller than a Class-C to 
be delegated.

So you can get 'upstream' info for a particular IP addr, but you may have 
a harder time getting the *actual* proprietor of it.

  /Bernie\
-- 
Bernie Cosell                     Fantasy Farm Fibers
mailto:bernie () fantasyfarm com     Pearisburg, VA
    -->  Too many people, too few sheep  <--