Whois - domain or IP identification

~~Nslookup parameters~~

NSLOOKUP is a programm for querying NS server for a specified domain. This tool is commonly used for detecting the IP address of the domain (A record), but can be used for receiving other NS records. It is very similar to DIG command. Unlike DIG, NSLOOKUP is based on its own resolver library.

Host

Requierd parameter, specifies the host about which is querying the information.

NS server

Optional parameter, specifies which NS server to query.

Port

Optional parameter, specifies the NS server port (53 by default)

Debug

Not set

-debug (show debug information)

-nodebug (no debug information in output, default)

Debug2

Not set

-d2 (show debug level 2 information)

-nod2 (no debug level 2 information in output, default)

~~Ping parameters~~

PING is the network command, which lets you check whether or not the host is alive and responding. The special protocol ICMP is used for pinging. See RFC 792 for ICMP protocol details. You can find the command parameters below.

Host

Requierd parameter, can be an IP or domain name.

Packet size

By default it is 56 bytes, which translates into 64 ICMP data bytes (8 bytes of ICMP header are added)

Map IP

Not set

-n (do not map IP to hostname)

MTU

Not set

-M do (prohibit fragmentation)

-M want (fragment locally when packet size is large)

-M dont (do not set DF flag)

Timestamp

Not set

-D (print timestamp)

~~Whois parameters~~

WHOIS searches Whois servers for the object (domain or IP). The special WHOIS protocol is used for querying the Whois servers. See RFC 3912 for the protocol specification. This command is available on all linux systems. There is only one parameter - host address. See decription below.

Host

Requierd parameter, can be an IP or domain name.

~~Host parameters~~

HOST is a DNS lookup utility. You can use it to convert names to IP addresses and vice versa. It is similar to DIG and NSLOOKUP. This command is available on all linux distributives. There are several parameters - see decription below.

Host

Requierd parameter, can be an IP or domain name.

NS server

Optional parameter, can be an IP or domain of name server

Protocol

Not set (auto)

-4 (force to use IPv4 only)

-6 (force to use IPv6 only)

All

Not set

-a (show the all information, this is equal to -v -t ANY)

Verbose mode

Not set

-v (turn on verbose mode)

~~Traceroute parameters~~

TRACEROUTE is the network diagnostic command. This command tracks the route packets taken from an IP network on their way to a given host. ICMP or UDP packets are used. You can find out the command parameters below.

Host

Requierd parameter, can be an IP or domain name.

Fragmentation

Not set (auto)

-F (do not fragment probe packets)

ICMP

Not set (UDP probes)

-I (Use ICMP ECHO for probes)

TCP

Not set

-T (Use TCP SYN for probes)

Map IP

Not set (auto)

-n (do not try to map IP to hostnames)

Protocol

Not set (auto)

-4 (IPv4)

-6 (IPv6)

Port

For UDP specifies the destination port

~~Geoiplookup parameters~~

GEOIPLOOKUP lets you detect the location of a host. A preparsed WHOIS database is used for detecting the location of IP or domain. This command has only one parameter - host address. There are a lot of geoip databases in the Internet, so there is no guarantee to get the same result of certain host when you use different databases. This command is not a standard Linux command.

Host

Requierd parameter, can be an IP or domain name.

~~Dig parameters~~

The DIG command is a part of BIND package, available on all linux distributives. It is used for querying Domain Name Servers (DNS) using standard operating system libraries and display answers from these DNS servers. Domain Information Groper (DIG) is useful for troubleshooting DNS issues. You can find DIG parameters below.

Host

Requierd parameter, can be an IP or domain name.

NS server

Requierd parameter, can be an IP or domain name.

Trace

Not set

+trace (enable tracing)

+notrace (disable tracing)

Tcp

Not set

+tcp (use TCP when querying name servers)

+notcp (disable TCP when querying name servers)

Ignore

Not set

+ignore (ignore truncation in UDP responses instead of retrying with TCP)

+noignore (retry with TCP when UDP responses is truncated)

AA only

Not set

+aaonly (set AA flag in the query)

+noaaonly (do not set AA flag in the query)

AD flag

Not set

+adflag (set AD flag "authentic data" in the query)

+noadflag (do not set AD flag in the query)

CD flag

Not set

+cdflag (set CD "checking disabled" bit in the query)

+nocdflag (do not set CD flag in the query)

Show class

Not set

+cl (display the CLASS when printing the record)

+nocl (do not show the CLASS)

Show TTL

Not set

+ttlid (display the TTL when printing the record)

+nottlid (do not show the TTL)

Answer

Not set

+answer (display answer section, default)

+noanswer (do not display answer section of a reply)

Comments

Not set

+comments (display comments section, default)

+nocomments (do not display comments section)

Recurse

Not set

+recurse (toggle RD bit in the query, default)

+norecurse (disable recursion in the query)

Short

Not set

+short (provide a terse answer)

+noshort (print answer in verbose form, default)

Cmd

Not set

+cmd (print dig version as a comment, default)

+nocmd (do not pring dig version)

Identify

Not set

+identify (show the IP address and port number of the server that provides the answer)

+noidentify (do not show the IP address and port number of the answered server, default)

Stats

Not set

+stats (show statistics, default)

+nostats (do not show statistics)

Authority

Not set

+authority (display authority section of a reply, default)

+noauthority (do not show authority section)

Additional

Not set

+additional (display additional section of a reply, default)

+noadditional (do not show additional section)

All

Not set

+all (set all display flag)

+noall (clear all display flag)

Multiline

Not set

+multiline (print records in multi-line format with comments)

+nomultiline (print records in single line format, default)

One SOA

Not set

+onesoa (print only one SOA record when performing an AXFR)

+noonesoa (print both the starting and ending SOA records, default)

Fail

Not set

+fail (try the next server if you receive SERVFAIL)

+nofail (do not try the next server if you receive SERVFAIL, default)

Best effort

Not set

+besteffort (attempt to display the contents of messages which are malformed)

+nobesteffort (do not display malformed answers, default)

DNSSEC

Not set

+dnssec (request DNSSEC records be sent by setting the DNSSEC OK bit "DO" in the OPT record)

+nodnssec (do not request DNSSEC records)

EDNS ID request

Not set

+nsid (include an EDNS name server ID request when sending a query)

+nonsid (do not include an EDNS name server ID request)