- handle case where IP/nn or IP/netmask handed in. - pull out of /etc/hosts if no lookup (clp?) ? - answer to sdterr if no answer - go to traceroute for last router above - whois 66.59.109.137@whois.arin.net (ripe / apnic / lacnic ?) for netblock