Reverse Name Lookup

The following is a trace of a Reverse Name Lookup using the "PING -a IP address" command. This sends the IP address to the DNS server and asks for the HOST name associated with the NetBIOS name. Remember that if the DNS server didn't have this name in its table, the DNS server will actually do an Adapter Status on the IP Address rather than going to WINS. However, that's only if you have the following check box checked in the properties of the *in-addr.arpa zone:

Ping -a 128.247.145.207


DNS: 0x1:Std Qry for 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr.
  DNS: Query Identifier = 1 (0x1)
  DNS: DNS Flags = Query, OpCode—Std Qry, RD Bits Set, RCode—No error
  DNS: Question Entry Count = 1 (0x1)
  DNS: Answer Entry Count = 0 (0x0)
  DNS: Name Server Count = 0 (0x0)
  DNS: Additional Records Count = 0 (0x0)
  DNS: Question Section: 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr.
   DNS: Question Name: 207.145.247.128.in-addr.arpa
   DNS: Question Type = Domain name pointer
   DNS: Question Class = Internet address class

Note that the Question name is the IP address backwards 207.145.247.128.in-addr.arpa of type PTR.


***************************************************************************************************************************** 
DNS: 0x1:Std Qry Resp. for 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr.
  DNS: Query Identifier = 1 (0x1)
  DNS: DNS Flags = Response, OpCode—Std Qry, AA RD RA Bits Set, RCode—No error

  DNS: Question Entry Count = 1 (0x1)
  DNS: Answer Entry Count = 1 (0x1)
  DNS: Name Server Count = 0 (0x0)
  DNS: Additional Records Count = 0 (0x0)
  DNS: Question Section: 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr.
   DNS: Question Name: 207.145.247.128.in-addr.arpa
   DNS: Question Type = Domain name pointer
   DNS: Question Class = Internet address class
  DNS: Answer section: 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr.
   DNS: Resource Name: 207.145.247.128.in-addr.arpa
   DNS: Resource Type = Domain name pointer
   DNS: Resource Class = Internet address class
   DNS: Time To Live = 86400 (0x15180)
   DNS: Resource Data Length = 23 (0x17)
   DNS: Pointer: scottsu-7.scottsu.com