Scribd Logo
Upload

Welcome to Scribd!

  • 2K views

    Lab 5 DNS

    Uploaded by

    Iqbal Uddin Khan
    This document summarizes the results of a lab experiment using nslookup to query DNS servers and examine DNS query and response messages. The key findings are: 1) Nslookup was used to query for IP addresses and name servers, with queries sent over UDP. Responses typically contained a single IP address or name server. 2) Queries were sent to the student's local DNS server at 192.168.1.1. Subsequent TCP connections used IP addresses from DNS responses. 3) DNS queries were issued for images embedded in web pages. Responses to type=NS queries listed authoritative name servers without accompanying IP addresses.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd

    Lab 5 DNS

    Uploaded by

    Iqbal Uddin Khan
    2K views9 pages
    This document summarizes the results of a lab experiment using nslookup to query DNS servers and examine DNS query and response messages. The key findings are: 1) Nslookup was used to query for IP addresses and name servers, with queries sent over UDP. Responses typically contained a single IP address or name server. 2) Queries were sent to the student's local DNS server at 192.168.1.1. Subsequent TCP connections used IP addresses from DNS responses. 3) DNS queries were issued for images embedded in web pages. Responses to type=NS queries listed authoritative name servers without accompanying IP addresses.

    Original Description:

    DNS lab, Dr Arshad- Advanced Communication Networks

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document summarizes the results of a lab experiment using nslookup to query DNS servers and examine DNS query and response messages. The key findings are: 1) Nslookup was used to query for IP addresses and name servers, with queries sent over UDP. Responses typically contained a single IP address or name server. 2) Queries were sent to the student's local DNS server at 192.168.1.1. Subsequent TCP connections used IP addresses from DNS responses. 3) DNS queries were issued for images embedded in web pages. Responses to type=NS queries listed authoritative name servers without accompanying IP addresses.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    2K views9 pages

    Lab 5 DNS

    Uploaded by

    Iqbal Uddin Khan
    This document summarizes the results of a lab experiment using nslookup to query DNS servers and examine DNS query and response messages. The key findings are: 1) Nslookup was used to query for IP addresses and name servers, with queries sent over UDP. Responses typically contained a single IP address or name server. 2) Queries were sent to the student's local DNS server at 192.168.1.1. Subsequent TCP connections used IP addresses from DNS responses. 3) DNS queries were issued for images embedded in web pages. Responses to type=NS queries listed authoritative name servers without accompanying IP addresses.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 9

    Advanced Communication Networks

    Lab - 05

    Iqbal Uddin Khan

    Lab 05 DNS
    Q1. Run nslookup to obtain the IP address of a Web server in Asia. Ans: I ran nslookup www.hamdard.edu.pk. Below is the screen shot.

    Q2. Run nslookup to determine the authoritative DNS servers for a university in Europe. Ans: I ran nslookup http://www.qub.ac.uk. The Queens University of Belfast, below is the screen shot.

    Q3. Run nslookup so that one of the DNS servers obtained in Question 2 is queried for the mail servers for Yahoo! mail. Ans: Below is the screenshot what I observed.

    Q4. Locate the DNS query and response messages. Are they sent over UDP or TCP? Ans: The DNS packets were sent over UDP. Screen shot is on next page.
    Page 1

    Advanced Communication Networks

    Lab - 05

    Iqbal Uddin Khan

    Q5. What is the destination port for the DNS query message? What is the source port of DNS response message? Ans: The both destination and query port were 53. Can be view on above and below pasted screenshots.

    Q6. To what IP address is the DNS query message sent? Use ipconfig to determine the IP address of your local DNS server. Are these two IP addresses the same? Ans: It was sent to 192.168.1.1, can be observed in above pasted screenshots, yes it is the same and can be observed in below pasted screenshot.

    Q7. Examine the DNS query message. What Type of DNS query is it? Does the query message contain any answers? Ans: It is a type A query and do not contains any answer, the screenshot is on next page

    Page 2

    Advanced Communication Networks

    Lab - 05

    Iqbal Uddin Khan

    Q8. Examine the DNS response message. How many answers are provided? What does each of these answers contain? Ans: Only one packet of response received having Answer contains ip address 64.170.98.30.

    Q9. Consider the subsequent TCP SYN packet sent by your host. Does the destination IP address of the SYN packet correspond to any of the IP addresses provided in the DNS response message? Ans: Yes! It corresponds to 64.170.98.30, screenshot is below.

    Q10. This web page contains images. Before retrieving each image, does your host issue new DNS queries? Ans: Yes! It issues different DNS queries for embedded links like www.rfc-editor.org, datatracker.ietf.org, and wiki.tools.ietf.org. Screenshot is on next page.

    Page 3

    Advanced Communication Networks

    Lab - 05

    Iqbal Uddin Khan

    With nslookup www.mit.edu


    Q11. What is the destination port for the DNS query message? What is the source port of DNS response message? Ans: Source is 192.168.0.105 and Destination is 192.168.1.1, shown in screenshot below.

    Q12. To what IP address is the DNS query message sent? Is this the IP address of your default local DNS server? Ans: It was sent to 192.168.1.1 and my local DNS address is also 192.168.1.1

    Q13. Examine the DNS query message. What Type of DNS query is it? Does the query message contain any answers? Ans: The query is type A and do not contain any answer. Packets screenshot is on next page.
    Page 4

    Advanced Communication Networks

    Lab - 05

    Iqbal Uddin Khan

    Q14. Examine the DNS response message. How many answers are provided? What does each of these answers contain? Ans: It contains a single answer ,including ip address and web address.

    Q15. Provide a screenshot. Ans: It is on next page.

    Page 5

    Advanced Communication Networks

    Lab - 05

    Iqbal Uddin Khan

    Repeating with nslookup type=NS mit.edu


    Q16. To what IP address is the DNS query message sent? Is this the IP address of your default local DNS server? Ans: It is sent to 192.168.1.1 and my local is same, as shown in Q12.

    Page 6

    Advanced Communication Networks

    Lab - 05

    Iqbal Uddin Khan

    Q17. Examine the DNS query message. What Type of DNS query is it? Does the query message contain any answers? Ans: The query is type A and do not contain any answer. As same as Q13.

    Q18. Examine the DNS response message. What MIT name servers does the response message provide? Does this response message also provide the IP addresses of the MIT name servers? Ans: It contains mit.edu: type NS, class IN, ns W20NS.mit.edu mit.edu: type NS, class IN, ns STRAWB.mit.edu mit.edu: type NS, class IN, ns BITSY.mit.edu but I cannot find ip addresses. Screenshot is below.

    Page 7

    Advanced Communication Networks

    Lab - 05

    Iqbal Uddin Khan

    Q19. Provide a screenshot

    Repeating with nslookup www.aiit.or.kr bitsy.mit.edu


    Q20. To what IP address is the DNS query message sent? Is this the IP address of your default local DNS server? If not, what does the IP address correspond to? Ans: It was sent to 18.72.0.3, it is not my local DNS and it corresponds to bitsy.mit.edu. See screenshot.

    Q21. Examine the DNS query message. What Type of DNS query is it? Does the query message contain any answers? Ans: It is the Type PTR query and dont contain any answer. Screen shot is on next page.

    Page 8

    Advanced Communication Networks

    Lab - 05

    Iqbal Uddin Khan

    Q22. Examine the DNS response message. How many answers are provided? What does each of these answers contain? Ans: It contains one answer along with the additional records as asked in Q18. Screen shot to be observed below.

    Q23. Provide a screenshot.

    Page 9

    You might also like