[sisyphus] Re: IA: lft-2.5

[Michael Shigorin]

On Thu, Aug 25, 2005 at 11:36:23PM +0300, Sasha Martsinuk wrote:
> >>Предлагаю сетевым администраторам оценить новую версию lft :-)
> > жутко интересная штуковина, однако :) 
> а можно показать примерный вывод?

--- whob:

~> whob   

WhoB - version 1.5

     - a no-frills whois client for internetwork engineers

Usage: whob [<options>] <hostname>

Options:

  -a         Display all routes announced by the respective ASN (pwhois-only)
  -P         Display all routes announced respective to a prefix (pwhois-only)
  -R         Display the Origin-AS on file at the RADB/IRR also
  -o         Display the organization's name on file at the registrar
  -p         Display the AS-Path learned by the pwhois server (pwhois-only)
  -n         Display the network name on file at the registrar also
  -t         Display the date the route was last updated (pwhois-only)
  -c/-C      Use Cymru's whois server instead of pwhois
  -r         Use RIPE NCC's RIS whois server instead of pwhois
  -h <host>  Specify your own pwhois-compatible server to query
  -V         Display verbose/debug output.  Use more 'V's for additional verbosity
  -v         Display WhoB's version information and exit(1)

Example:    $ ./whob -nop 1.2.3.4
Returns:    IP | ASN-by-prefix (prefix) | AS-Path | NetName | OrgName

~> whob 193.193.193.100
193.193.193.100 | origin-as 3254 (193.193.193.0/24) 
~> whob -nop 193.193.193.100 
193.193.193.100 | origin-as 3254 (193.193.193.0/24) | as-path 1299 6849 3254 | RIPE-CBLK/LUCKYNET | Lucky Net Ltd., an ISP in Kyiv, Ukraine 

--- lft:

~> /usr/sbin/control lft
netadmin
~> id | grep netadmin   
~> sudo lft             

Layer Four Traceroute (LFT)

    - the alternative traceroute tool for network (reverse) engineers

Usage: lft [<options>] [<gateway> <...>] <target:destport>

Options are:
  -d <dport>       destination port number
  -s <sport>       source port number
  -m <min>         minimum number of probes to send per host
  -M <max>         maximum number of probes to send per host
  -a <ahead>       number of hops forward to query before receiving replies
  -c <scatter ms>  minimum number of milliseconds between subsequent queries
  -t <timeout ms>  maximum RTT before assuming packet was dropped
  -l <min ttl>     minimum TTL to use on outgoing packets
  -q <sequence>    set the initial sequence number (ISN)
  -D <device|ip>   network device name or IP address (e.g., "en1" or "1.2.3.4")
  -H <ttl>         maximum number of hops to traverse (max TTL of packets)
  -z               use pseudo-random source port number
  -i               disable "stop on ICMP" other than TTL expired
  -n               display hosts numerically; disable use of the DNS resolver
  -h               display hosts symbolically; suppress IP address display
  -N               enable lookup of network names (whois)
  -A               enable lookup of AS numbers using Prefix WhoIs
  -r               use RIPE NCC RIS to lookup ASNs instead of Prefix WhoIs
  -R               use RADB to lookup ASNs instead of Prefix WhoIs
  -C               use Cymru to lookup ASNs instead of Prefix WhoIs
  -T               enable display of LFT's execution timer
  -S               suppress the status bar (only show the completed trace)
  -F               enable use of FIN packets only (defaults are SYN)
  -E/-e            enable LFT's stateful Engine to detect firewalls
  -V               print debug information; more V's = more verbose.
  -v               show version information and exit

Default is: lft -d 80 -m 1 -M 2 -a 5 -c 20 -t 1000 -H 30 -s 53

~> sudo lft 193.193.193.100
Tracing ......T
TTL LFT trace to ns.lucky.net (193.193.193.100):80/tcp
 1  xxxxxxxx (10.0.0.254) 0.5ms
 2  xxxxxxxxxxxxxxxxxxx (x.x.x.x) 4.6ms
 3  xxxxxxxxxxxxxxxxxxxxxxx (x.x.x.x) 5.0ms
 4  lucky-gw.ix.net.ua (195.35.65.30) 6.7ms
 5  serval.lucky.net (193.193.193.45) 6.7ms
 6  [target] ns.lucky.net (193.193.193.100):80 6.7ms

-- 
 ---- WBR, Michael Shigorin <mike на altlinux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/