Scribd
Upload
1 views

TY5-51-EXP4

Uploaded by

vanshitaparab1475
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
1 views

TY5-51-EXP4

Uploaded by

vanshitaparab1475
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

Mahavir Education Trust's

SHAH & ANCHOR KUTCHHI ENGINEERING COLLEGE


Chembur, Mumbai - 400 088
UG Program in Information Technology

Experiment No. – 04

Date of Performance: 31/07/24

Date of Submission: 12/08/24

Program Execution/
formation/ Timely
Viva Experiment Sign with
correction/ Submission
(03) Total (10) Date
ethical practices (01)
(06)
Experiment No 4

Aim: Network reconnaissance tools like WHOIS, dig, traceroute, nslookup to gather
information

Theory:
1. WHOIS
○ Purpose: WHOIS is a protocol designed to query databases that hold information
about the registered users or assignees of domain names and IP addresses.
○ How it Works: When a WHOIS query is performed, it retrieves details like the
domain owner's contact information, registration dates, and the domain registrar.
This helps identify the entity behind a website, providing valuable contact
information, which can be used for legitimate reasons (such as dispute resolution)
or malicious purposes (such as phishing).
○ Use Cases:
■ Domain Ownership Verification: Assists in confirming the ownership of a
domain.
■ Contacting Domain Owners: Useful for addressing trademark issues or
initiating collaborations.
2. Dig (Domain Information Groper)
○ Purpose: Dig is a command-line tool used for querying Domain Name System
(DNS) servers.
○ How it Works: It provides detailed DNS record information, such as A (IPv4),
AAAA (IPv6), MX (mail exchange), and NS (name server) records. Dig is more
versatile and powerful than the older nslookup tool.
○ Use Cases:
■ DNS Troubleshooting: Helps diagnose problems with domain resolution.
■ Information Gathering: Employed by security professionals to collect data
on target domains.
3. Traceroute
○ Purpose: Traceroute is a diagnostic tool used to track the path of packets as they
travel from one host to another across a network.
○ How it Works: Traceroute sends packets with incrementally increasing
Time-To-Live (TTL) values, revealing the route packets take to reach a specified
destination. Each router in the path sends back an ICMP "time exceeded"
message, enabling the tool to log the IP addresses of the hops.
○ Use Cases:
■ Network Performance Analysis: Helps identify network bottlenecks and
latency issues.
■ Network Mapping: Provides insights into the network structure between
two points.
4. Nslookup
○ Purpose: Nslookup is a command-line utility used to query DNS for domain name
or IP address mapping.
○ How it Works: Similar to dig, nslookup retrieves DNS records. It can operate in
two modes: interactive mode, where multiple queries can be executed within a
session, and non-interactive mode, which handles a single query at a time.
○ Use Cases:
■ DNS Querying: Used to check DNS records for a given domain.
■ Debugging: Useful for troubleshooting DNS-related issues.

Use of Network Reconnaissance Tools:


Network reconnaissance tools are vital for network administrators and cybersecurity
professionals for various purposes, including:
1. Monitoring and Diagnosing Network Issues: Tools like ping and traceroute check
connectivity, detect delays, and identify network disruptions by tracing data paths.
2. Gathering Domain Information: Tools like WHOIS and nslookup retrieve domain details,
useful for troubleshooting and gathering domain intelligence.
3. Checking DNS Configuration: Tools like dig and nslookup verify DNS record
configurations, ensuring domain accessibility and resolving DNS issues.
These tools provide critical insights into network infrastructure, helping ensure network security,
stability, and proper configuration. They are widely used to maintain and secure networks
effectively.

Output:
1. WHOIS command Screenshot
2. DIG command screenshot

3. TRACEROUTE command screenshot

4. NSLOOKUP command screenshot

Conclusion:
Conclusion: Each tool provides unique insights that contribute to a comprehensive understanding
of a network's architecture and operation. The results can be analyzed to evaluate network
performance, security posture, or to identify potential vulnerabilities.

You might also like