CIRCL / traceroute-circl

Traceroute improved wrapper for CSIRT and CERT operators

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

traceroute-circl

traceroute-circl is an extended traceroute to support the activities of CSIRT (or CERT) operators. Usually CSIRT team have to handle incidents based on IP addresses received.

Features

  • Display abuse and contact for each hop
  • Display CIRCL BGP Ranking services (experimental)
  • Can highligh specific country to match CSIRT's constituency
  • Output RBL entries for each hop
  • Output Google Maps traceroute (e.g. a sample output )
  • Show ASN origin from RIPE RIS and origin.asn.cymru.com sources

Usage

    perl traceroute-circl --ip 1.2.3.4
    perl traceroute-circl --rbl ipbl.zeustracker.abuse.ch --ip 1.2.3.4
    perl traceroute-circl --country LU --ip www.circl.lu 
    perl traceroute-circl -i australia.gov.au -m out.js
    perl traceroute-circl -i www.w3c.org -o"-I -v"

    traceroute-circl v0.3
    usage: traceroute-circl [options] 
    options                                                             
    -d, --debug         Debug mode                                      
    -i, --ip            IP address to lookup                            
    -r, --rbl           RBL domain to lookup                            
    -b, --bgpranking    Output CIRCL BGP Ranking for each ASN
    -o, --addoptions    Additional option to traceroute
    -c, --country       Country ISO code to highlight (!!) in the output
    -f, --fullcountry   Display full country name                       
    -m, --geomap        Output file for the google map                  
    -h, --help          This help message                               
        --man           Display documentation

Dependencies

  • Perl
  • Perl Module Getopt::Compact
  • Perl Module Net::Whois::RIS
  • Perl Module IP::Country::Fast
  • Perl Module Net::Abuse::Utils
  • Perl Module Locale::Country
  • Perl Module LWP::Simple (used for Google Maps country lookup)
  • Perl Module JSON (used for Google Maps country lookup)
  • and an existing "traceroute"/"traceroute-nanog" on your operating system

Authors

Copyright (C) 2010-2011 Alexandre Dulaunoy

Copyright (C) 2010-2011 CIRCL Computer Incident Response Center Luxembourg (smile gie)

About

Traceroute improved wrapper for CSIRT and CERT operators

License:GNU General Public License v3.0