Is there any reason you can't simply assume every line received after a 311 and before a 318 is part of the whois?