Problem 18 - Computer Networking: A Top-Down Approach

Question

Use the whois service at the American Registry for Internet Numbers (http://www.arin.net/whois) to determine the IP address blocks for three universities. Can the whois services be used to determine with certainty the geographical location of a specific IP address? Use www.maxmind.com to determine the locations of the Web servers at each of these universities.

Step-by-Step Solution

Answer

Whois shows ownership, not location; geolocation services provide approximate locations.

Step 1: Identify Universities

First, select three universities for which you want to find the IP address blocks. For example, we might choose Harvard University, Stanford University, and the Massachusetts Institute of Technology (MIT).

Step 2: Access ARIN WHOIS Service

Go to the ARIN WHOIS service website by visiting http://www.arin.net/WHOIS. This service allows you to input the names of the selected universities to retrieve IP address block information.

Step 3: Search for IP Address Blocks

For each university, enter its name or domain name into the search bar on the ARIN WHOIS page. Note down the IP address blocks registered to each university. These will be visible in the search results.

Step 4: Analyze Geographic Location of IPs

To check the geographical location, visit the www.maxmind.com website. Use their IP geolocation tools to verify the location of each IP address block retrieved from ARIN.

Step 5: Interpret WHOIS and Geolocation Data

Carefully compare the data from ARIN WHOIS and MaxMind. Note that while WHOIS provides registration details, it does not guarantee precise geographic locations. MaxMind provides estimated physical locations based on IP data, but these locations are not always exact.

Key Concepts

WHOIS Service

The WHOIS service is a public database used to access registration information about IP addresses and domain names. Essentially, it keeps a record of who owns an IP address or a domain, and includes details such as the entity's name, contact information, and more.
The American Registry for Internet Numbers (ARIN) offers a WHOIS service that is widely used for finding information about IP addresses. You can access this service by visiting ARIN's website, where you can search for information using the name of an organization, such as a university, or an IP address block.
When you perform a search, the WHOIS service provides data about the registered owner of the IP resources, revealing the allocation of certain IP blocks to entities like universities. However, understanding this data requires caution. The WHOIS service shows ownership and registration details but does not provide real-time location information of where the IP address might be used geographically.

ARIN Registry

The ARIN Registry is one of several organizations globally responsible for managing the allocation of IP addresses in the North American region.

• ARIN stands for American Registry for Internet Numbers.
• It provides essential services in the allocation and management of IP address space.
• ARIN is part of the five Regional Internet Registries (RIRs) worldwide.

ARIN's registry contains a database that includes detailed information about the allocation and assignment of IP addresses. For institutions such as universities, which need large blocks of IP addresses, ARIN is the agency that manages these allocations and maintains records of them.
This registry helps ensure that IP address space is used efficiently and verifiably. Users can access its database via the ARIN WHOIS service to find critical registration information about IP address block allocations under its purview.

University Networks

University networks refer to the digital systems and infrastructures used by educational institutions to maintain Internet connectivity. These networks typically require significant IP address resources to connect their campuses, students, faculty, and support their diverse technological needs.
University networks often have dedicated IT departments managing their IP resources. They coordinate with organizations like ARIN to obtain and manage IP address space effectively. This often includes efforts to secure and optimize their network configurations, ensuring that IP addresses are well-utilized and easily managed.
With multiple buildings, campuses, and online services, universities need efficient network management to handle bandwidth demands, support research activities, and maintain secure connections for academic and administrative purposes. Successful management of these networks is essential for academic advancement and operational stability.

Geographical Location Determination

Geographical location determination of an IP address involves identifying the physical location associated with a particular IP resource. This task usually requires the use of advanced geolocation services, which can estimate where devices or services are likely to be located based on IP data.
Tools such as MaxMind offer geolocation services that approximate the location related to the IP addresses. They use extensive databases and analysis algorithms to provide probable geographic data.
However, it's essential to realize the limitations of such services:

• Precision is not guaranteed.
• Geolocation databases may not have real-time updates.
• Estimates might pinpoint ISPs or hosting services rather than the actual user location.
• Accuracy can vary based on the region and data availability.

Overall, while geolocation tools provide useful approximations, they should be used in conjunction with registration data, such as that from WHOIS, to form a fuller understanding of an IP address's characteristics and probable location.