nslookup 命令

nslookup这个名字的意思是:"name server lookup".

这个命令行工具是内置在的命令行工具, windows和unix上都有. 能允许用户查询网络中的域IP地址, 或主机的IP地址.

首先需要理解到NSLOOKUP会假设你正在查询在私有网络上的本地域. 你可以查询external 的domain, 但是NSLOOKUP会先在内部域查询.

nslookup 有下面的子命令:

• server NAME (这里的NAME是查询的DNS服务器的服务器名或者IP地址). 查询DNS服务器并不总是可以的, 因为经常对DNS的查询会为防止拒绝服务式攻击而被阻止掉.
• set type=NAME (这里的NAME是要查询的记录的类型). 比如说, set type mx会给出mail records.

使用方法:

C:\Users\yunzhang>nslookup ?
Usage:
   nslookup [-opt ...]             # interactive mode using default server
   nslookup [-opt ...] - server    # interactive mode using 'server'
   nslookup [-opt ...] host        # just look up 'host' using default server
   nslookup [-opt ...] host server # just look up 'host' using 'server'

这个命令行工具在排查DNS协议的错误的时候非常有用, 一般你会先使用Ping命令, 看看网络是否通畅. 之后, nslookup就排的上用场了.

NAME

print info about the host/domain NAME using default server

NAME1 NAME2

as above, but use NAME2 as server

help or ?

print info on common commands

set OPTION

set an option

all	print options, current server and host
[no]debug	print debugging information
[no]d2	print exhaustive debugging information
[no]defname	append domain name to each query
[no]recurse	ask for recursive answer to query
[no]search	use domain search list
[no]vc	always use a virtual circuit
domain=NAME	set default domain name to NAME
srchlist=N1[/N2/.../N6]	set domain to N1 and search list to N1,N2, etc.
root=NAME	set root server to NAME
retry=X	set number of retries to X
timeout=X	set initial time-out interval to X seconds
type=X	set query type (ex. A,ANY,CNAME,MX,NS,PTR,SOA,SRV)
querytype=X	same as type
class=X	set query class (ex. IN (Internet), ANY)
[no]msxfr	use MS fast zone transfer
ixfrver=X	current version to use in IXFR transfer request

server NAME

set default server to NAME, using current default server

lserver NAME

set default server to NAME, using initial server

finger [USER]

finger the optional NAME at the current default host

root

set current default server to the root

ls [opt] DOMAIN [> FILE]

list addresses in DOMAIN (optional: output to FILE)

-a	list canonical names and aliases
-d	list all records
-t TYPE	list records of the given type (e.g. A,CNAME,MX,NS,PTR etc.)

view FILE

sort an 'ls' output file and view it with pg

exit

exit the program

输出结果解释

==============

命令运行结果如下

C:\Documents and Settings\Administrator.YUNZHANG>nslookup 190043m5
Server:  engx86win2k8.contoso.local   //使用的DNS Server的名字
Address:  192.168.1.1

Name:    190043m5.contoso.lab   //解析server name的结果
Address:  192.168.1.5

如果想要从IP地址得到主机名hostname, 可以通过命令nbtstat -a 

举例:

PS C:\Users\administrator.MIDRANGE> nbtstat -a 10.32.176.70

Local Area Connection:
Node IpAddress: [10.32.176.76] Scope Id: []

           NetBIOS Remote Machine Name Table

       Name               Type         Status
    ---------------------------------------------
    MIDRANGE       <00>  GROUP       Registered
    DC01           <00>  UNIQUE      Registered
    MIDRANGE       <1C>  GROUP       Registered
    DC01           <20>  UNIQUE      Registered
    MIDRANGE       <1B>  UNIQUE      Registered

    MAC Address = 00-50-56-80-02-8B

PS C:\Users\administrator.MIDRANGE> nbtstat -a 10.32.176.103

Local Area Connection:
Node IpAddress: [10.32.176.76] Scope Id: []

           NetBIOS Remote Machine Name Table

       Name               Type         Status
    ---------------------------------------------
    VM-WIN2K8-TEST <00>  UNIQUE      Registered
    SHSC           <00>  GROUP       Registered
    VM-WIN2K8-TEST <20>  UNIQUE      Registered

    MAC Address = 00-50-56-B9-6C-D1

PS C:\Users\administrator.MIDRANGE>

摘自:

http://en.wikipedia.org/wiki/Nslookup

Microsoft DOS nslookup command

http://www.computerhope.com/nslookup.htm

Using NSLOOKUP for DNS Server diagnosis

http://www.windowsnetworking.com/articles_tutorials/Using-NSLOOKUP-DNS-Server-diagnosis.html#

How to determine the hostname from an IP address in a Windows network?nsll

http://serverfault.com/questions/88064/how-to-determine-the-hostname-from-an-ip-address-in-a-windows-network