Link to home
Start Free TrialLog in
Avatar of exdos
exdos

asked on

I there a tool to convert ip addresses to hostnames?

I have run a scan with a security patch checker. It has identified a ip address that does not have the relevant patch. Having looked through the dchp server list i cannot find any records of the is ip address.

I there a free tool to convert ip addresses to hostnames?
SOLUTION
Avatar of stevenlewis
stevenlewis

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of exdos
exdos

ASKER

downloaded the tool and typed in the ip address
result was
"Can't convert"
i typed in the address of one of our servers and it worked fine. I then tyoe in the address of your router and got the result of "Can't convert". So i am now rather confused. Thanks for the lonk to the tool.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
these tools appear to use reverse lookup to resolve hostnames meaning that if you don't have a dns record for the ip address it won't be able to resolve it... to test the theory i added an ip address to a windows 2000 server and didn't add the dns record... attempted to resolve and received the could not resolve response from both programs... is it possible this address you're looking for is an additional address on an existing workstation?  i would try patching all the computers that don't have the patch and rerun the network scanner to check if the address still isn't patched...
of course they use reverse lookup via DNS,,, there is no other way or standard for converting ip to hostname, that is what DNS does.
What do you mean by "converting" ? Why do you need a conversion? Are u talking about a random names generator considering the ip addresses or what?

About the ip address you can't see it ... maybe this is a static address so that's why it doesn't show up in your dhcp server.

Cheers.
did you do what lrmoore said:
C:\>nslookup <ip address>

or you could do a
net send IP address who the crap is this?, call ext whatever

or you could even do an nmap on it in case it was like a unix box or a print server or something.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Sorry use the script below rather not the one above...

strComputer = "enter ip address"

Set wbemServices = GetObject("winmgmts:\\" & strComputer)
Set wbemObjectSet = wbemServices.InstancesOf("Win32_ComputerSystem")

For Each wbemObject In wbemObjectSet
    WScript.Echo "Display Name:  " & wbemObject.Name
Next
true,,, but i didn't want to go back to 1988 and talk about the past,, i think he doesn't have any DNS or WINS server at all and wants to be able to somehow "magically" map his computers name to IP address,, which i dont think is possible
that's fine... but i don't understand why you would even make this comment "of course they use reverse lookup via DNS,,, there is no other way or standard for converting ip to hostname, that is what DNS does." wasn't productive... didn't offer any advice... if you don't have any suggestions then why bother?
The device with this IP Address probably doesn't have a hostname assigned. Maybe it is a printer or some other active device, not a PC? If you download and use a programm like GFX Lannetscan and then do a scan of that IP Address you may get more info, like what OS or what kind of device that probably is.
kain21,, my point was that with his current setup i dont think you can do what he is trying to do. since he doesn't have any mechanism to do the resolution (ie a wins or DNS server)
On our site it is often hard to track down errant IPs. Using the tools above you can get the MAC address of the machine.
Next if you have access (find someone if you dont) start up your switch management software (or telnet) and find out what switch and what port that address is on. trace that port to the patch on the patch panel and bingo you have the physical location.

Not an elegant solution but it works in all cases for us ;-) (PS: can track a system down in less than 5 minutes here, but we only have 400 systems, 5 switches across 3 buldings)

Bel
Beldoran,
May I suggest a tool for you that can find it in seconds... check out the switchport mapper from SolarWinds..
http://www.solarwinds.net/Tools/Engineer/Categories/Network_Discovery.htm

exdos, the solarwinds toolset also has many name resolution tools that are invaluable to anyone conducting vulnerability analysis.

Bottom line is that if an IP address is not registered in DNS or in WINS, or learned via Netbios broadcast, or learned via an snmp query, then there isn't much else you can do.
Try Solarwinds Pingsweep tool. It will do everything it can to resolve each IP address to a hostname...
Hi lrmoore, long time no see!
I agree
"Bottom line is that if an IP address is not registered in DNS or in WINS, or learned via Netbios broadcast, or learned via an snmp query, then there isn't much else you can do"

hence the reason the router could convert/resolve
lrmoore,

Thanks, nice tools there. I will play with the evals when I have some time.
the switch side for us is really easy, it is the physical patching in the cabinet and the lack of building maps that takes the time. but the tools look really good.

Bel