[PLUG-TALK] "whois" Result Formats

drew wymore drew.wymore at gmail.com
Sun Jul 19 18:26:59 UTC 2009


On Sun, Jul 19, 2009 at 11:18 AM, Rich Shepard <rshepard at appl-ecosys.com>wrote:

> On Sun, 19 Jul 2009, drew wymore wrote:
>
> > This part
> > Hoku Unlimited HOKU-UNLIMITED (NET-66-79-103-48-1)
> >                                  66.79.103.48 - 66.79.103.63
> > Nth Air, Inc. NTHAIRNET (NET-66-79-96-0-1)
> >                                  66.79.96.0 - 66.79.127.255
> >
> > The first listed is the owner of the IP space from the IP registrar -
> ARIN
> > for North America. The second listed is a sub delegate of the first,
> > usually the first is an a larger level ISP sub-delegating IP space to a
> > secondary ISP or business that requires large IP blocks.
> >
> > So Nth Air is getting blocks from Hoku in this example.
>
> > Does that help at all?
>
> Drew,
>
>   Unfortunately, no. I know what the above tells us, so I suppose that I
> did
> not word my question well.
>
>   What I want to understand is why there is this second form with no
> location or contact information associated with it. I thought that all ISPs
> were required to have an 'abuse' user as all domains are supposed to have a
> 'postmaster' user (but not all do). Why doesn't 'whois' return the more
> complete information for _all_ requests? ARIN returns the more complete
> information for many queries, and RIPE sometimes returns the second,
> abbreviated, format.
>
> Rich
>
> --
> Richard B. Shepard, Ph.D.               |  Integrity            Credibility
> Applied Ecosystem Services, Inc.        |            Innovation
> <http://www.appl-ecosys.com>     Voice: 503-667-4517      Fax:
> 503-667-8863
> _______________________________________________
> PLUG-talk mailing list
> PLUG-talk at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug-talk
>

No idea why it's returning the limited format but I found the flags to get
the whole thing or if you're looking for contact you can limit the query for
that as well.

 whois  -h whois.arin.net + <address> will return the format you're looking
for.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pdxlinux.org/pipermail/plug-talk/attachments/20090719/eda7c53b/attachment.html>


More information about the PLUG-talk mailing list