The following is a trace of a Reverse Name Lookup using the "PING -a IP address" command. This sends the IP address to the DNS server and asks for the HOST name associated with the NetBIOS name. Remember that if the DNS server didn't have this name in its table, the DNS server will actually do an Adapter Status on the IP Address rather than going to WINS. However, that's only if you have the following check box checked in the properties of the *in-addr.arpa zone:
Ping -a 128.247.145.207
DNS: 0x1:Std Qry for 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr. DNS: Query Identifier = 1 (0x1) DNS: DNS Flags = Query, OpCode—Std Qry, RD Bits Set, RCode—No error DNS: Question Entry Count = 1 (0x1) DNS: Answer Entry Count = 0 (0x0) DNS: Name Server Count = 0 (0x0) DNS: Additional Records Count = 0 (0x0) DNS: Question Section: 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr. DNS: Question Name: 207.145.247.128.in-addr.arpa DNS: Question Type = Domain name pointer DNS: Question Class = Internet address class
Note that the Question name is the IP address backwards 207.145.247.128.in-addr.arpa of type PTR.
***************************************************************************************************************************** DNS: 0x1:Std Qry Resp. for 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr. DNS: Query Identifier = 1 (0x1) DNS: DNS Flags = Response, OpCode—Std Qry, AA RD RA Bits Set, RCode—No error DNS: Question Entry Count = 1 (0x1) DNS: Answer Entry Count = 1 (0x1) DNS: Name Server Count = 0 (0x0) DNS: Additional Records Count = 0 (0x0) DNS: Question Section: 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr. DNS: Question Name: 207.145.247.128.in-addr.arpa DNS: Question Type = Domain name pointer DNS: Question Class = Internet address class DNS: Answer section: 207.145.247.128.in-addr.arpa of type Dom. name ptr on class INET addr. DNS: Resource Name: 207.145.247.128.in-addr.arpa DNS: Resource Type = Domain name pointer DNS: Resource Class = Internet address class DNS: Time To Live = 86400 (0x15180) DNS: Resource Data Length = 23 (0x17) DNS: Pointer: scottsu-7.scottsu.com