[Internet-e-architetture-di-rete] esercizi riepilogativi governance, IPv4, IPv6, routing

Mauro Angiolillo m.angiolillo at comuneap.gov.it
Sat May 7 20:09:25 CEST 2016


Salve prof, provo a risolvere uno degli esercizi assegnati (uno in particolare ha attirato la mia
attenzione :):

Il 04/05/16 11:30, Antonio Prado via Internet-e-architetture-di-rete ha scritto:
> ##############################################################
> siano dati i seguenti indirizzi IP:
> 
> 203.114.102.100
> 2a03:2880:f001:1f:face:b00c::25de
> 23.50.139.33
> 2001:5008:101:289::2768
> 62.149.188.210
> 193.108.205.15
> 178.236.6.27
> 2001:67c:2e8:22::c100:68b
> 2001:760:0:158::2
> 2001:1900:3001:11::31
> 
> rispondere ai quesiti (incollando la riga di comando) per ciascun IP:
> 
> A. qual e' l'INET(6)NUM di appartenenza?
> B. da quale RIR e' rilasciato?
> C. qual e' l'AS di origine?
> D. incollare il relativo oggetto AUT-NUM
> E. commenti e osservazioni
> ##############################################################

Svolgimento:

IPV6:  2a03:2880:f001:1f:face:b00c::25de

Interrogando il database whois dello iana per sapere da chi è stata rilasciata la risorsa:

[gandalf at gondor:~] whois -I 2a03:2880:f001:1f:face:b00c::25de
% IANA WHOIS server
% for more information on IANA, visit http://www.iana.org
% This query returned 1 object

inet6num:     2a00:0:0:0:0:0:0:0/12
organisation: RIPE NCC
status:       ALLOCATED

whois:        whois.ripe.net

changed:      2006-10-03
source:       IANA

Ok, interrogo il database del RIPE, trattandosi di roba loro:

[gandalf at gondor:~] whois -r 2a03:2880:f001:1f:face:b00c::25de
inet6num:       2a03:2880::/29
netname:        IE-FACEBOOK-201100822
descr:          Facebook Ireland Ltd

Diamo un'occhiata al database del radb:

[gandalf at gondor:~] whois -m 2a03:2880:f001:1f:face:b00c::25de
route6:     2a03:2880:f001::/48
descr:      Facebook, Inc.
origin:     AS32934
mnt-by:     MAINT-AS32934
changed:    dsp at fb.com 20130911  #03:09:41Z
source:     RADB

Quindi sentiamo cosa sappiamo di questo AS:

[gandalf at gondor:~] whois -I AS32934
% IANA WHOIS server
% for more information on IANA, visit http://www.iana.org
% This query returned 1 object

refer:        whois.arin.net

as-block:     32861-33566
organisation: Assigned by ARIN

whois:        whois.arin.net
descr:        Assigned by ARIN

source:       IANA

[gandalf at gondor:~] whois -a AS32934

ASNumber:       32934
ASName:         FACEBOOK
ASHandle:       AS32934
RegDate:        2004-08-24
Updated:        2012-02-24
Comment:        Please send abuse reports to abuse at facebook.com
Ref:            https://whois.arin.net/rest/asn/AS32934


OrgName:        Facebook, Inc.
OrgId:          THEFA-3
Address:        1601 Willow Rd.
City:           Menlo Park
StateProv:      CA
PostalCode:     94025
Country:        US
RegDate:        2004-08-11
Updated:        2012-04-17
Ref:            https://whois.arin.net/rest/org/THEFA-3


OrgTechHandle: OPERA82-ARIN
OrgTechName:   Operations
OrgTechPhone:  +1-650-543-4800
OrgTechEmail:  noc at fb.com
OrgTechRef:    https://whois.arin.net/rest/poc/OPERA82-ARIN

OrgAbuseHandle: OPERA82-ARIN
OrgAbuseName:   Operations
OrgAbusePhone:  +1-650-543-4800
OrgAbuseEmail:  noc at fb.com
OrgAbuseRef:    https://whois.arin.net/rest/poc/OPERA82-ARIN

RNOCHandle: OPERA82-ARIN
RNOCName:   Operations
RNOCPhone:  +1-650-543-4800
RNOCEmail:  noc at fb.com
RNOCRef:    https://whois.arin.net/rest/poc/OPERA82-ARIN

RAbuseHandle: OPERA82-ARIN
RAbuseName:   Operations
RAbusePhone:  +1-650-543-4800
RAbuseEmail:  noc at fb.com
RAbuseRef:    https://whois.arin.net/rest/poc/OPERA82-ARIN

RTechHandle: OPERA82-ARIN
RTechName:   Operations
RTechPhone:  +1-650-543-4800
RTechEmail:  noc at fb.com
RTechRef:    https://whois.arin.net/rest/poc/OPERA82-ARIN


Da quello che ho potuto osservare, la risorsa numerica è stata assegnata dal RIPE, mentre l'AS dall'ARIN.
Possiamo ricavare qualche informazione specifica riguardo l'AS a: http://bgp.he.net/AS32934


Scendendo maggiormente nel dettaglio dell'host:

[gandalf at gondor:~] ping6 -c 3 2a03:2880:f001:1f:face:b00c::25de
PING6(56=40+8+8 bytes) 2001:b07:2ec:6f88:6cee:5f06:7999:c58c --> 2a03:2880:f001:1f:face:b00c::25de
16 bytes from 2a03:2880:f001:1f:face:b00c::25de, icmp_seq=0 hlim=51 time=220.584 ms
16 bytes from 2a03:2880:f001:1f:face:b00c::25de, icmp_seq=1 hlim=51 time=236.035 ms
16 bytes from 2a03:2880:f001:1f:face:b00c::25de, icmp_seq=2 hlim=51 time=226.462 ms

Ok, l'host risponde ai ping

[gandalf at gondor:~] dig -x 2a03:2880:f001:1f:face:b00c::25de +short
edge-star-mini6-shv-01-sea1.facebook.com.

[gandalf at gondor:~] dig edge-star-mini6-shv-01-sea1.facebook.com. aaaa +short
2a03:2880:f001:1f:face:b00c::25de

Reverse dns e hostname corrispondono...

[gandalf at gondor:~] nc -nz -6 2a03:2880:f001:1f:face:b00c::25de 80
Connection to 2a03:2880:f001:1f:face:b00c::25de port 80 [tcp/*] succeeded!

[gandalf at gondor:~] nc -nz -6 2a03:2880:f001:1f:face:b00c::25de 443
Connection to 2a03:2880:f001:1f:face:b00c::25de port 443 [tcp/*] succeeded!

[gandalf at gondor:~] nc -nz -6 2a03:2880:f001:1f:face:b00c::25de 843
Connection to 2a03:2880:f001:1f:face:b00c::25de port 843 [tcp/*] succeeded!

Le porte tcp 80 e 443 (http e https) risultano aperte (e funzionanti), da cui deduco che l'host
in questione è (anche) un server web (o, molto probabilmente, un load-balancer).

Sperando di non aver fatto troppi errori (portando fuori pista i miei compagni di corso),
auguro a tutti una buona serata.

Mauro

-- 
Dott. Ing. Mauro Angiolillo
Linux Registered User #343216
GnuPG-Key fingerprint = 90A3 3F92 6008 7383 A569  E952 CF97 383B 63F6 F425

				      -*-

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 203 bytes
Desc: OpenPGP digital signature
URL: <http://list.informagiovani.comunesbt.it/pipermail/internet-e-architetture-di-rete/attachments/20160507/dbe78610/attachment.bin>


More information about the Internet-e-architetture-di-rete mailing list