hackertarget
March 29th, 2010, 03:59 AM
Running through the install of 10.04 beta 1 - and I was surprised to find that the installer knew where I lived.
IP geolocation lookup against my external IP?
So I restarted the install and did a tcpdump. Nice one guys - If I had a dollar for every time I changed the location from USA whether on Windows or Linux. ;)
13:49:57.149748 IP europium.canonical.com.ntp > ubuntu.local.53705: NTPv4, Server, length 48
13:49:57.160271 IP ubuntu.local.33977 > newinstall.local.domain: 54579+ AAAA? geoip.ubuntu.com. (34)
13:49:57.180762 IP newinstall.local.domain > ubuntu.local.33977: 54579 0/1/0 (95)
13:49:57.180848 IP ubuntu.local.46825 > newinstall.local.domain: 28778+ AAAA? geoip.ubuntu.com. (34)
13:49:57.200442 IP newinstall.local.domain > ubuntu.local.46825: 28778 0/1/0 (95)
13:49:57.200492 IP ubuntu.local.51552 > newinstall.local.domain: 64756+ A? geoip.ubuntu.com. (34)
13:49:57.200788 IP newinstall.local.domain > ubuntu.local.51552: 64756 1/3/3 A[|domain]
IP geolocation lookup against my external IP?
So I restarted the install and did a tcpdump. Nice one guys - If I had a dollar for every time I changed the location from USA whether on Windows or Linux. ;)
13:49:57.149748 IP europium.canonical.com.ntp > ubuntu.local.53705: NTPv4, Server, length 48
13:49:57.160271 IP ubuntu.local.33977 > newinstall.local.domain: 54579+ AAAA? geoip.ubuntu.com. (34)
13:49:57.180762 IP newinstall.local.domain > ubuntu.local.33977: 54579 0/1/0 (95)
13:49:57.180848 IP ubuntu.local.46825 > newinstall.local.domain: 28778+ AAAA? geoip.ubuntu.com. (34)
13:49:57.200442 IP newinstall.local.domain > ubuntu.local.46825: 28778 0/1/0 (95)
13:49:57.200492 IP ubuntu.local.51552 > newinstall.local.domain: 64756+ A? geoip.ubuntu.com. (34)
13:49:57.200788 IP newinstall.local.domain > ubuntu.local.51552: 64756 1/3/3 A[|domain]