[SOLVED] Whois a command output

t.othoneos · 10-11-2011, 01:58 PM

Hey everyone,

I have a file that has IP addresses and usernames like so:

1.2.3.4 usera@net.com
5.6.7.8 userb@other.com
7.5.6.3 user2@some.com

there are about 26000 lines.

What i need to do is use the whois server whois.cymru.com and get the ASNumber and Country code for each IP address, and then have a result like this

1.2.3.4 usera@net.com 6799 GR
5.6.7.8 userb@other.com 2056 EU
7.5.6.3 user2@some.com 32557 UK

A normal whois on that server would be like:
whois -h whois.cymru.com " -c -o -f 75.126.162.205"
and the result : 36351 | 75.126.162.205 | US

The server itself provides bulk queries with netcat but for some reason, the results are more than the IPs provided.

I can extract the IP addresses with a "cut -f 1 file". Then I'm stuck.
PLS HELP

colucix · 10-11-2011, 02:33 PM

What about something like this?

Code:

while read ip mail
do
  var="$(whois -h whois.cymru.com " -c -o -f 75.126.162.205" | tail -1)"
  asn=$(echo $var | awk '{print $1}')
  cod=$(echo $var | awk '{print $NF}')
  printf "%15s %s %d %s\n" $ip $mail $asn $cod
done < file

t.othoneos · 10-11-2011, 02:44 PM

Thnx colucix,

but there's an error like this:

-bash: printf: US: invalid number
67.185.84.130 36351 0
-bash: printf: US: invalid number
213.144.186.65 36351 0

colucix · 10-11-2011, 02:49 PM

Shouldn't it be the fourth field printed out? Anyway, just change the format of the printf statement to

Code:

"%15s %s %s %s\n"

that is all strings and it should be fine.

t.othoneos · 10-11-2011, 02:51 PM

My bad,

inputed the wrong file.

Worked like a charm.

Thank you very much. You saved me a tone of hours.

colucix · 10-11-2011, 02:56 PM

You're welcome!