[comp.protocols.tcp-ip.domains] Finding hostnames of a domain

RRH@VM.NRC.CA (04/16/91)

Hello Netters,

This is my first posting to this group so excuse any mistakes. How do I
use the NSLOOKUP to find the names of all the hosts of a domain. I am
trying to locate the Network Ad. for locus.com. I don't have a clue what
machine he uses. So I thought if I could list all the machines within
locus.com, maybe some machine might give me a clue.

Thanks in advance  Ratilal Haria

leonard@telcom.arizona.edu (Aaron Leonard) (04/17/91)

In article <1991Apr15.211341.7704@nrcnet0.nrc.ca>, root@nrcnet0.nrc.ca 
(Operator) writes:

|>How do I use the NSLOOKUP to find the names of all the hosts of a domain. 

You can try:
$ nslookup
> ls foo.dom > filename

which may or may not work.

|>I am trying to locate the Network Ad. for locus.com. I don't have a clue what
|>machine he uses. So I thought if I could list all the machines within
|>locus.com, maybe some machine might give me a clue.

A better approach would be this:

$ nslookup
> set type=soa
> locus.com

The mail address (in username.fully.qualified.domain.name format) of the
person responsible for the (nameservice for) the locus.com domain
will be given.

Actually in this case, we find that locus.com is an MX-only domain (i.e.
does not appear to have any hosts directly attached to the Internet.)

So you can drop back to plan #2, which is to send mail to 
postmaster@locus.com.  (All machines that receive mail are required
to have a mailbox called "postmaster" which is read by a human on
a more or less regular basis.)

Aaron

Mike.Marshall@HUBCAP.CLEMSON.EDU (System Janitor) (04/17/91)

You can usually find out with ls if you ask the right nameserver:


Script started on Wed Apr 17 09:03:48 1991
csh> nslookup
Default Server:  hubcap.clemson.edu
Address:  130.127.8.1

csh> nslookup
Default Server:  hubcap.clemson.edu
Address:  130.127.8.1

> ls arizona.edu
[hubcap.clemson.edu]
Host or domain name            Internet address              
*** Error during listing of arizona.edu: No information
> set q=ns
> arizona.edu
Server:  hubcap.clemson.edu
Address:  130.127.8.1

Non-authoritative answer:
arizona.edu	nameserver = ARIZONA.EDU
arizona.edu	nameserver = CS.ARIZONA.EDU
arizona.edu	nameserver = PENDRAGON.CS.PURDUE.EDU
Authoritative answers can be found from:
ARIZONA.EDU	inet address = 128.196.128.233
ARIZONA.EDU	inet address = 128.196.128.234
CS.ARIZONA.EDU	inet address = 192.12.69.1
PENDRAGON.CS.PURDUE.EDU	inet address = 128.10.2.5
> set q=a
> server arizona.edu
Default Server:  arizona.edu
Address:  128.196.128.233

> ls arizona.edu
[arizona.edu]
Host or domain name            Internet address              
 arizona                        server = Arizona.EDU                   
 Arizona                        128.196.128.233
 Arizona                        128.196.128.234
 arizona                        server = CS.Arizona.EDU                
 CS                             192.12.69.5
 arizona                        server = pendragon.cs.purdue.edu       

         ... ludicrous amounts of information deleted ...

 flwo-gw                        192.33.140.1
 galileo                        128.196.176.94
> ^D
csh> ^D
script done on Wed Apr 17 09:05:47 1991

-Mike

swansonc@acc.stolaf.edu (Chris Swanson) (04/18/91)

>>>>> On 15 Apr 91 21:11:35 GMT,
>>>>> in message <1991Apr15.211341.7704@nrcnet0.nrc.ca>,
>>>>> RRH@VM.NRC.CA wrote:

RRH> Hello Netters,

RRH> This is my first posting to this group so excuse any mistakes.
RRH> How do I use the NSLOOKUP to find the names of all the hosts of a
RRH> domain. I am trying to locate the Network Ad. for locus.com. I
RRH> don't have a clue what machine he uses. So I thought if I could
RRH> list all the machines within locus.com, maybe some machine might
RRH> give me a clue.

RRH> Thanks in advance  Ratilal Haria

First, you could try the whois program on locus to find the net
record "handle" then use use that handle to lookup the actual net
record, and that should give you the admin. contact.  This would be
easier than nslookup.

If you still want/need to use nslookup, enter nslookup interactively
and type "server locus.com" at the > promt to set up the ns server as
locus.com then type the command "ls locus.com" and you should get a
listing of all of the hosts in that domain if they have set it up to
allow the ls.

	-Chris

--
Chris Swanson, Chem/CS/Pre-med Undergrad, St. Olaf College, Northfield,MN 55057
 DDN: (CDS6)   INTERNET:  swansonc@acc.stolaf.edu  UUCP: uunet!stolaf!swansonc
  AT&T:		Work: (507)-645-4528			Home: (507)-663-6424
	I would deny this reality, but that wouldn't pay the bills...

NU021172@VM1.NODAK.EDU (Marty Hoag) (04/18/91)

On Wed, 17 Apr 91 09:09:21 -0400 you said:
>
>You can usually find out with ls if you ask the right nameserver:
...
>> set q=a
>> server arizona.edu
>Default Server:  arizona.edu
>Address:  128.196.128.233
>
>> ls arizona.edu
>[arizona.edu]
>Host or domain name            Internet address
> arizona                        server = Arizona.EDU
> Arizona                        128.196.128.233
> Arizona                        128.196.128.234
> arizona                        server = CS.Arizona.EDU
> CS                             192.12.69.5
> arizona                        server = pendragon.cs.purdue.edu
...

   Is it a bug or a feature that this list is almost useless unless
you do a      set debug    .    Note on the sample above that the
"Host or domain name" field is less than illuminating in most cases!
The problem is that nslookup only lists the first element of the name,
no matter what the domain is!  The system I normally use is not unix
but I just stumbled across this.  I didn't see it listed in the man
pages.

   Here is the same request with "set debug" on.  Note that instead of
just "pendragon" which you would have gotten without debug, you see
that the entry is really not an arizona entity.

> set debug
> ls arizona.edu
res_mkquery(0, arizona.edu, 1, 252)
&arizona.edua
Host or domain name            Internet address
 arizona.edu                    server = Arizona.EDU                    86400
 Arizona.EDU                    128.196.128.233                 86400
 Arizona.EDU                    128.196.128.234                 86400
 arizona.edu                    server = CS.Arizona.EDU                 86400
 CS.Arizona.EDU                 192.12.69.5                     86400
 arizona.edu                    server = pendragon.cs.purdue.edu        86400
 pendragon.cs.purdue.edu        128.10.2.5                      120034
 arizona.edu                    128.196.128.233                 86400
 arizona.edu                    128.196.128.234                 86400
 wmorgan.peds-pulm.arizona.edu  128.196.164.8                   86400
 sec1.peds-pulm.arizona.edu     128.196.164.6                   86400

-----------
Marty Hoag
ND Higher Education Computer Network    US Mail: NDSU Computer Center
Phone: (701)-237-8639  Fax: (701)-237-7464       PO Box 5164 / UCCS
Bitnet:   nu021172@NDSUVM1    (NOTE 0 = ZERO)    Fargo, ND  58105
Internet: nu021172@VM1.NoDak.EDU
UUCP:    ...!uunet!plains!vm1.nodak.edu!nu021172