[Attendee] Rogue RA

Shumon Huque shuque at isc.upenn.edu
Tue Jun 16 21:30:32 UTC 2009


On Tue, Jun 16, 2009 at 09:23:22PM +0000, Chris Morrow wrote:
> 
> 
> On Tue, 16 Jun 2009, Chris Morrow wrote:
> > On Tue, 16 Jun 2009, Michael Sinatra wrote:
> >> If I have decoded the 6to4 address properly, the RAs are being announced
> >> by the host with IPv4 address 75.196.207.17, which is a Verizon Wireless
> >
> > code to decode addr pls.
> 
> i ask because:
> 
> morrowc at tweezer:~$ ifconfig wlan0  | grep 2002
>            inet6 addr: 2002:4bc4:cf11:b:58bd:5bee:d59b:c8c6/64 Scope:Global
>            inet6 addr: 2002:4bc4:cf11:b:21d:e0ff:fe90:1acb/64 Scope:Global
>            inet6 addr: 2002:4bc4:cf11:b:74b9:a96e:55af:6abd/64 Scope:Global
>            inet6 addr: 2002:4bc4:cf11:b:dd31:7550:87c2:747b/64 Scope:Global
>            inet6 addr: 2002:4bc4:cf11:b:91d2:ac70:e21c:157f/64 Scope:Global
>            inet6 addr: 2002:4bc4:cf11:b:a425:3a98:1398:2dbd/64 Scope:Global
> 
> 
> it'd be nice to hammer down on the others there :) (other 6 from what I 
> can tell)

Here's my 1-line of python:

	#!/usr/local/bin/python
	import sys, socket, struct
	print socket.inet_ntoa(struct.pack("!I", int(sys.argv[1],16)))

Extract the 32 bits (8 hex digits) after 2002: and feed it to this script:

	$ hex2ip 4bc4cf11
	75.196.207.17

--Shumon.
















> 
> _______________________________________________
> Attendee mailing list
> Attendee at nanog.org
> http://mailman.nanog.org/mailman/listinfo/attendee



More information about the Attendee mailing list