After composing yet another chapter in this treatise and then losing it after an errant pinkie brushed across the freeze-the-system key, I'm starting over to find a way of finishing the hostname-resolution process:

There are three methods of resolving hostnames:

1. Magic Banana's technique of extracting the four octets of a candidate IPv4 address and then testing three different permutations of those octets by performing nMap scans, with some postprocessing added in line:

time tr -sc 0-9\\n ' ' < CPV-GB-OneCol0-6192019.txt | awk '{ k = 0; for (i = 0; k < 4 && ++i CPV-MB-answers-noNS-Rev-Supplemental-Output-Sorted.txt

Takes fifty-four seconds ... all the answers as well as the interlopers, but IPv4's have to be extracted from the ARPA data. Note that dig -f will not return the PTR records of the candidate IPv4 addresses unless there's an "-x " in front of each of the three permutations of the extracted four octets in Magic Banana's portion of this script that are then sent to dig -f.

Process the ARPA list:

time tr -sc 0-9\\n ' ' < CPV-ARPA-list.txt | awk '{ k = 0; for (i = 0; k < 4 && ++i Sorted on the candidate hostname list and then compared manually to the original list
of hostnames gathered from a single morning's Recent Visitors.

B. CPV-ThreeMethods-06222019-sort.ods ==> Sorted on the search method, with dig first, then nMap and finally NSL.

C. CPV-ThreeMethods-06222019-Yes.ods ==> Sorted on the outcomes of the searches, with successful (Y) first. "O" indicates names that are outside of the scope of the present scripts, but which can be found easily on the Internet.

And here''s the scorecard: CPV-GB-OneCol0-6192019-Resolved-Sort.ods ==> Three hostnames that should have been found with Magic Banana's script were somehow missed ("None ?). All the rest of the hostnames were resolved by one or more of the three methods. Of course, the bare IPv4 addresses at the bottom of this last table are easily fleshed out with whois, then their CIDR blocks, and lastly, the list of CIDR blocks within their Autonomous System, which is what I planto do with the resolved IPv4 addresses in order to find the multiply duplicated PTR records which otherwise hide those IPv4 addresses from scrutiny.

Reply via email to