IP Mapping (advanced traceroute?) Software

[nitrobass24]

Bought a company, all the IT people quit from the old company or were told to go pound sand....clearly not my decision.

Now we have 500 External IPs that we have no idea where they map to internal systems.


Trying to figure out a systematic way to determine where our external presence translates to on the inside of our network.

 

[Berg0]

500 IP's on the same WAN conection, or is this like, multiple locations, each with multiple IP's? Not sure if you're trinyg to figure out NAT and routing, or which physical locations correspond to which IPs?

 

[nitrobass24]

500 IP's on the same WAN conection, or is this like, multiple locations, each with multiple IP's? Not sure if you're trinyg to figure out NAT and routing, or which physical locations correspond to which IPs?

30 different Datacenters
we have 500 external IPs that host customer facing systems....which just dont know which ones or where they are(geo location, or internal IPs)

Its a disaster.

 

[Berg0]

nmap + dig ? do you have a big list o' IP's?

 

[cyr0n_k0r]

maybe look at the firewall or router ACL's?

 

[Exavior]

damn that sucks.

what type of equipment do you have in place for the network?

I can think of "hard" ways of doing this by going into each main router, looking at what you have there and see what networks feed off of that then follow everything back to any firewall / servers then see what all IPs are on each device...

 

[cyr0n_k0r]

going into each main router, looking at what you have there and see what networks feed off of that then follow everything back to any firewall / servers

so taking what I said and repeating it?

 

[Exavior]

so taking what I said and repeating it?

sorry, i forgot to finish my thought there before i clicked submit

yes that part is repeating what you said, meant to finish that by saying but don't know of any easy way to map out every single ip on every device through every network.

 

[cyr0n_k0r]

Internally it's easy. Angry IP Scanner.
External IP's are a little different.

 

[nitrobass24]

damn that sucks.

what type of equipment do you have in place for the network?

I can think of "hard" ways of doing this by going into each main router, looking at what you have there and see what networks feed off of that then follow everything back to any firewall / servers then see what all IPs are on each device...

What type of equipment, Cisco, Juniper mainly. A little of kinds of crap that has been acquired.

Yea im trying to avoid doing these hard ways. I dont know how many routers/firewall/L3switches there are but like i said above we have 30 Datacenters, we are only interested in a few hunderd external IPs

 

[Exavior]

did you ever come up with a way to do what you wanted?

 

[nitrobass24]

Looking at getting some licensing for SkyBox.

http://www.skyboxsecurity.com/products/network-assurance

 

[mwarps]

dig -x $ip-address ???

Unless your predecesors were just as brain-dead as your current management, that should work. If it doesn't work, be glad the morons fired the morons.

Since you didn't specify anything more than "map".. that's what I've got.

Once you get a handle on that, i'd use something like netdot to manage that shit.

Get some reverse DNS going on at least so you don't want to tear your hair out (and so the next guys or new guys don't have as hard a time)