Re: rDNS scanning

[doug () hcsw org]

On Fri, Dec 05, 2008 at 05:55:17PM -0800 or thereabouts, Corey Chandler wrote:
> This leads to a LOT of lines in the scan-- is there a way to instruct 
> nmap to only return results that have a PTR record?

Could be another way to do this, but I'd prolly just use perl:

doug@eclipse:~/nmap/svn/nmap$ ./nmap -sL microsoft.com/24 | perl -ne 'print unless /^Host [\d.]+ /'

Starting Nmap 4.68 ( http://nmap.org ) at 2008-12-05 21:08 EST
Warning: Hostname microsoft.com resolves to 2 IPs. Using 207.46.232.182.
Stats: 0:00:13 elapsed; 0 hosts completed (0 up), 0 undergoing Host Discovery
Parallel DNS resolution of 256 hosts. Timing: About 81.64% done; ETC: 21:09 (0:00:01 remaining)
Host iustsecurc1201-ge-2-0.msft.net (207.46.232.2) not scanned
Host iustsecurc1202-ge-2-0.msft.net (207.46.232.5) not scanned
Host iustsecurc1203-fe-2-1.msft.net (207.46.232.34) not scanned
Host iustsecurc1204-fe-2-1.msft.net (207.46.232.36) not scanned
Host dns1tk.msft.net (207.46.232.37) not scanned
Host gig3-4.tuk-65ns-mcs-1a.ntwk.msn.net (207.46.232.131) not scanned
Host gig3-4.tuk-65ns-mcs-1b.ntwk.msn.net (207.46.232.132) not scanned
Host preview-ws.msdn2.microsoft.com (207.46.232.160) not scanned
Host woodgrovebank.com (207.46.232.183) not scanned
Host genuinebeta.microsoft.com (207.46.232.187) not scanned
Host register.microsoft.com (207.46.232.188) not scanned
Host iustsecurc1203-fe-2-2.msft.net (207.46.232.194) not scanned
Host iustsecurc1204-fe-2-2.msft.net (207.46.232.197) not scanned
Nmap done: 256 IP addresses (0 hosts up) scanned in 18.77 seconds

Hope this helps,

Doug

Attachment: _bin
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org