Connection Detective Determine how they are connected, but don't assume that a traceroute to their web server will give you the answer...

Consider these scenarios:

1. The organization hosts all their servers at their own facility.  A traceroute to the web server or email server will also indicate how the entire organization is connected
2. The organization chooses to host all of their servers with various out-sourced solutions.  Recognize that the web server, email server, and Access provider to the organization's building can all be with different vendors.  The most assured way of determining how this organization is connected would be to do  a traceroute to a connection_persona of one of the employees who has visited a web site (This method works for all scenarios)
3. Some servers may be out-sourced, some may be located locally.  A traceroute to a locally hosted server will show how the organization is connected

Here are several integrated multi-use tools:

• robtex - the swiss army knife internet search tool
• domaintool - search for domain names even using wild cards.
• netcraft - shows what software a webserver is running
• Multiple DNS Look-up Engine -  Enter a web domain, or IP number, and this site will allow you to discover who are the target's neighbors (from an IP number point of view)
• dnsstuff.com - looks like a great site.
• opus 1 - a traceroute with options you can set (display AS, number of packets, etc)
• adhoc IP tools,
• Network-tools.com - another great  resource (click on one of the numbers to go to a mirrored page) - Be sure to try DNS Records.
• Sam Spade - try the scan rDNS to scan a network block for named hosts.
• domain Tools - offers lots of tools including being able to pull up a domain's whois  history.
• codeflux - easy interface to whois, dig, traceroute, etc.
• Centralops.nets - offers a collection of several online tools.
• zonedit's web-based DNS look-up.
• Multiple traceroute - initiate simultaneous Traceroutes from servers around the world. 
• Mark's Reviews of DNS Tools For Windows - These applications run from your PC.
• Ad-hoc IP tools.  - links to many tool sites.
• Spam Tools - Long list tools for investigating spammers or online web sites.
• Netlantis, used to do make nice AS maps - has been offline for a while now

Other advanced tools: 

• AS Mappings; GASP and Graphical AS Matrix,
• JASPI - Java Autonomous System Path Visualization = Very Cool - Enter an AS number watch a realtime map get created. (Sam Spade Traceroute or Fixed_orbit can show you the AS numbers)
• AS Trace - shows the path between any two points on the Internet at the AS level.
• FRnog -has some very cool tools.  Try the advanced routes search on the home page
• Many More Tools are linked through CAIDA's Tool page.
• Netcraft (tells you what a web server is running)
• The Authoritative list of AS Numbers : ftp://ftp.arin.net/info/asn.txt
• TCP Traceroute -can often succeed where UDP traceroutes fail.
• CAIDA - does a lot of nice research on the Internet's connectivity

You should also explore the advanced options of traditional resources.  For example the APNIC can show you all the IP numbers allocated to specific countries. Internet Protocols - Nice detailed write-up from Cisco about TCP-IP, BGP Technical Presentations, RFC 1786 - representing IP Routing Policies in a routing registry.

NANOG Meeting Archive, Ripe Meeting archive of presentations, SANOG (meeting archives are on left side)

Placeholder for interesting webpages: infosyssec, LFT Traceroute, technical info, infrastructure links, security tools,

Contact me at 703-729-1757 or  Russ 'at' navigators.com  
If you use email, put "internet training" in the subject of the email.
Copyright ©  Information Navigators