Module: Ronin::Support::Network::ASN

Defined in:
lib/ronin/support/network/asn.rb,
lib/ronin/support/network/asn/list.rb,
lib/ronin/support/network/asn/record.rb,
lib/ronin/support/network/asn/dns_record.rb,
lib/ronin/support/network/asn/record_set.rb

Overview

Handles Autonomous System Numbers (ASN).

Example

Query the ASN record for a given IP address:

Network::ASN.query('4.2.2.1')
# =>
# #<Ronin::Support::Network::ASN::DNSRecord:0x00007f34424f4ac0
#  @country_code="US",
#  @name=nil,
#  @number=3356,
#  @range=#<Ronin::Support::Network::IPRange::CIDR: 4.0.0.0/9>>

Query all ASN records for the given ISP name:

Network::ASN.list.name('LEVEL3').to_a
# => [#<Ronin::Support::Network::ASN::Record:0x00007f344164ed18
#      @country_code="US",
#      @name="LEVEL3",
#      @number=3356,
#      @range=#<Ronin::Support::Network::IPRange::Range: 4.0.0.0 - 4.23.87.255>>,
#     #<Ronin::Support::Network::ASN::Record:0x00007f344164d828
#      @country_code="US",
#      @name="LEVEL3",
#      @number=3356,
#      @range=#<Ronin::Support::Network::IPRange::Range: 4.23.90.0 - 4.23.91.255>>,
#     ...]

Query all IPv6 ASN records for a given company:

Network::ASN.list.name('GOOGLE').ipv6
# =>
# [#<Ronin::Support::Network::ASN::Record:0x00007fc45b411500
#   @country_code="US",
#   @name="GOOGLE",
#   @number=15169,
#   @range=
#    #<Ronin::Support::Network::IPRange::Range: 2001:4860:: - 2001:4860:1024:ffff:ffff:ffff:ffff:ffff>>,
#  #<Ronin::Support::Network::ASN::Record:0x00007fc45b428d68
#   @country_code="US",
#   @name="GOOGLE",
#   @number=15169,
#   @range=
#    #<Ronin::Support::Network::IPRange::Range: 2001:4860:1026:: - 2001:4860:4804:ffff:ffff:ffff:ffff:ffff>>,
#  #<Ronin::Support::Network::ASN::Record:0x00007fc45b44be08
#   @country_code="US",
#   @name="GOOGLE",
#   @number=15169,
#   @range=
#    #<Ronin::Support::Network::IPRange::Range: 2001:4860:4806:: - 2001:4860:4864:ffff:ffff:ffff:ffff:ffff>>,
#  #<Ronin::Support::Network::ASN::Record:0x00007fc45b4562e0
#   @country_code="US",
#   @name="GOOGLE",
#   @number=15169,
#   @range=
#    #<Ronin::Support::Network::IPRange::Range: 2001:4860:4865:: - 2001:4860:ffff:ffff:ffff:ffff:ffff:ffff>>]

Return all ASN numbers for a country:

Network::ASN.list.country('NZ').numbers
# => #<Set:
#     {45177,
#      55759,
#      55850,
#      9500,
#      ...}>

Return all ASN names for a country:

Network::ASN.list.country_code('NZ').names
# Network::ASN.list.country('NZ').names
# =>
# #<Set:
#  {"DEVOLI-AS-AP Devoli",
#   "MFAT-NET-NZ 195 Lambton Quay",
#   "MERCURYNZ-AS-AP Mercury NZ Limited",
#   ...}>

Since:

  • 1.0.0

Defined Under Namespace

Classes: DNSRecord, List, Record, RecordSet

Class Method Summary collapse

Class Method Details

.list ⇒ List

Note:

The first access of list will take a while, as the entire ASN list will need to be downloaded and parsed.

Downloads/updates then loads the cached file (~/.local/share/ronin/ronin-support/ip2asn-combined.tsv.gz).

Examples:

Query the ASN record for the given IP address:

Network::ASN.list.ip('4.2.2.1')
# =>
# #<Ronin::Support::Network::ASN::Record:0x00007fc46207f818
#  @country_code="US",
#  @name="LEVEL3",
#  @number=3356,
#  @range=#<Ronin::Support::Network::IPRange::Range: 4.0.0.0 - 4.23.87.255>>

Query all ASN records for the given ISP name:

Network::ASN.list.name('LEVEL3').to_a
# => [#<Ronin::Support::Network::ASN::Record:0x00007f344164ed18
#      @country_code="US",
#      @name="LEVEL3",
#      @number=3356,
#      @range=#<Ronin::Support::Network::IPRange::Range: 4.0.0.0 - 4.23.87.255>>,
#     #<Ronin::Support::Network::ASN::Record:0x00007f344164d828
#      @country_code="US",
#      @name="LEVEL3",
#      @number=3356,
#      @range=#<Ronin::Support::Network::IPRange::Range: 4.23.90.0 - 4.23.91.255>>,
#     ...]

Query all IPv6 ASN records for a given company:

Network::ASN.list.name('GOOGLE').ipv6
# =>
# [#<Ronin::Support::Network::ASN::Record:0x00007fc45b411500
#   @country_code="US",
#   @name="GOOGLE",
#   @number=15169,
#   @range=
#    #<Ronin::Support::Network::IPRange::Range: 2001:4860:: - 2001:4860:1024:ffff:ffff:ffff:ffff:ffff>>,
#  #<Ronin::Support::Network::ASN::Record:0x00007fc45b428d68
#   @country_code="US",
#   @name="GOOGLE",
#   @number=15169,
#   @range=
#    #<Ronin::Support::Network::IPRange::Range: 2001:4860:1026:: - 2001:4860:4804:ffff:ffff:ffff:ffff:ffff>>,
#  #<Ronin::Support::Network::ASN::Record:0x00007fc45b44be08
#   @country_code="US",
#   @name="GOOGLE",
#   @number=15169,
#   @range=
#    #<Ronin::Support::Network::IPRange::Range: 2001:4860:4806:: - 2001:4860:4864:ffff:ffff:ffff:ffff:ffff>>,
#  #<Ronin::Support::Network::ASN::Record:0x00007fc45b4562e0
#   @country_code="US",
#   @name="GOOGLE",
#   @number=15169,
#   @range=
#    #<Ronin::Support::Network::IPRange::Range: 2001:4860:4865:: - 2001:4860:ffff:ffff:ffff:ffff:ffff:ffff>>]

Return all ASN numbers for a country:

Network::ASN.list.country('NZ').numbers
# => #<Set:
#     {45177,
#      55759,
#      55850,
#      9500,
#      ...}>

Return all ASN names for a country:

Network::ASN.list.country_code('NZ').names
# Network::ASN.list.country('NZ').names
# =>
# #<Set:
#  {"DEVOLI-AS-AP Devoli",
#   "MFAT-NET-NZ 195 Lambton Quay",
#   "MERCURYNZ-AS-AP Mercury NZ Limited",
#   ...}>

Returns:

  • (List) —

    The loaded list file.

Since:

  • 1.0.0



240
241
242
243
244
245
 
# File 'lib/ronin/support/network/asn.rb', line 240

def self.list
  @list ||= begin
              List.update
              List.load_file
            end
end

.query(ip) ⇒ Record?

Note:

Performs rDNS queries using *.nmap.asn.cymru.com for IPv4 addresses and *.nmap6.asn.cymru.com for IPv6 addresses.

Queries the ASN information for the given IP.

Examples:

Network::ASN.query('4.2.2.1')
# =>
# #<Ronin::Support::Network::ASN::DNSRecord:0x00007f34424f4ac0
#  @country_code="US",
#  @name=nil,
#  @number=3356,
#  @range=#<Ronin::Support::Network::IPRange::CIDR: 4.0.0.0/9>>

Parameters:

Returns:

  • (Record, nil) —

    The ASN record or nil if the IP address is not routed.

Since:

  • 1.0.0



134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
 
# File 'lib/ronin/support/network/asn.rb', line 134

def self.query(ip)
  ip = IPAddr.new(ip) unless ip.kind_of?(IPAddr)

  if ip.ipv6?
    zone   = 'nmap6.asn.cymru.com'
    suffix = 'ip6.arpa'
  else
    zone   = 'nmap.asn.cymru.com'
    suffix = 'in-addr.arpa'
  end

  name = ip.reverse.sub(suffix,zone)

  unless (string = DNS.get_txt_string(name))
    return nil
  end

  asn, cidr_range, country_code, *_rest = string.split(' | ',5)

  asn        = asn.to_i
  cidr_range = IPRange::CIDR.new(cidr_range)

  return DNSRecord.new(asn,cidr_range,country_code)
end