Using Nslookup to find a hostname Analyze the sample email header given below. This includes only an IP address. Return-Path: Received: from murder ([unix socket]) (authenticated user=djmurray bits=0) by email1.acsu.buffalo.edu (Cyrus v2.2.12-UB_mail1_2005_03_01) with LMTPA; Thu, 9 Feb 2006 23:21:45 -0500 Delivered-To: djmurray@mailspool08.dyn.acsu.buffalo.edu Received: (qmail 14244 invoked from network); 10 Feb 2006 04:21:45 -0000 Received: from unknown (HELO mailscan5.acsu.buffalo.edu) (128.205.6.137) by mail1 with SMTP; 10 Feb 2006 04:21:45 -0000 Received: (qmail 19652 invoked by uid 22493); 10 Feb 2006 04:21:45 -0000 Delivered-To: djmurray@buffalo.edu Received: (qmail 19642 invoked from network); 10 Feb 2006 04:21:45 -0000 Received: from bay105-f39.bay105.hotmail.com (HELO hotmail.com) (65.54.224.49) by front3.acsu.buffalo.edu with SMTP; 10 Feb 2006 04:21:45 -0000 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Thu, 9 Feb 2006 20:21:44 -0800 Message-ID: Received: from 65.54.224.200 by by105fd.bay105.hotmail.msn.com with HTTP; Fri, 10 Feb 2006 04:21:44 GMT X-Originating-IP: [69.163.26.172] X-Originating-Email: [mgs351@hotmail.com] X-Sender: mgs351@hotmail.com From: "Dave Murray" To: djmurray@buffalo.edu Bcc: Subject: Check the email header Date: Thu, 9 Feb 2006 23:21:44 -0500 Mime-Version: 1.0 Content-Type: text/plain; format=flowed X-OriginalArrivalTime: 10 Feb 2006 04:21:44.0284 (UTC) FILETIME=[53FB91C0:01C631E7] X-UB-Relay: (bay105-f39.bay105.hotmail.com) X-PM-Spam-Prob: : 7% X-DCC-Buffalo.EDU-Metrics: email1.acsu.buffalo.edu 1028; Body=0 There is a DOS command called nslookup and a parallel command in UNIX called host which will lookup a hostname based on an IP address and vice versa. Open a DOS command prompt and run the nslookup command to determine the hostname of the machine that sent the email message above. The syntax of the command is: nslookup IPaddress (where IPaddress is the IP of the machine you want to lookup) Record the IP address of the sending computer: _______________________________ Record the hostname of the sending computer: ________________________________ Trace the path of the email and draw it here.
Using Nslookup to find a hostname
Analyze the sample email header given below. This includes only an IP address.
Return-Path: <mgs351@hotmail.com>
Received: from murder ([unix socket])
(authenticated user=djmurray bits=0)
by email1.acsu.buffalo.edu (Cyrus v2.2.12-UB_mail1_2005_03_01) with LMTPA;
Thu, 9 Feb 2006 23:21:45 -0500
Delivered-To: djmurray@mailspool08.dyn.acsu.buffalo.edu
Received: (qmail 14244 invoked from network); 10 Feb 2006 04:21:45 -0000
Received: from unknown (HELO mailscan5.acsu.buffalo.edu) (128.205.6.137)
by mail1 with SMTP; 10 Feb 2006 04:21:45 -0000
Received: (qmail 19652 invoked by uid 22493); 10 Feb 2006 04:21:45 -0000
Delivered-To: djmurray@buffalo.edu
Received: (qmail 19642 invoked from network); 10 Feb 2006 04:21:45 -0000
Received: from bay105-f39.bay105.hotmail.com (HELO hotmail.com) (65.54.224.49)
by front3.acsu.buffalo.edu with SMTP; 10 Feb 2006 04:21:45 -0000
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Thu, 9 Feb 2006 20:21:44 -0800
Message-ID: <BAY105-F3985E65AD8211242644D0281FA0@phx.gbl>
Received: from 65.54.224.200 by by105fd.bay105.hotmail.msn.com with HTTP;
Fri, 10 Feb 2006 04:21:44 GMT
X-Originating-IP: [69.163.26.172]
X-Originating-Email: [mgs351@hotmail.com]
X-Sender: mgs351@hotmail.com
From: "Dave Murray" <mgs351@hotmail.com>
To: djmurray@buffalo.edu
Bcc:
Subject: Check the email header
Date: Thu, 9 Feb 2006 23:21:44 -0500
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 10 Feb 2006 04:21:44.0284 (UTC) FILETIME=[53FB91C0:01C631E7]
X-UB-Relay: (bay105-f39.bay105.hotmail.com)
X-PM-Spam-Prob: : 7%
X-DCC-Buffalo.EDU-Metrics: email1.acsu.buffalo.edu 1028; Body=0
There is a DOS command called nslookup and a parallel command in UNIX called
host which will lookup a hostname based on an IP address and vice versa. Open a
DOS command prompt and run the nslookup command to determine the hostname of
the machine that sent the email message above. The syntax of the command is:
nslookup IPaddress (where IPaddress is the IP of the machine you want to lookup)
- Record the IP address of the sending computer: _______________________________
- Record the hostname of the sending computer: ________________________________
- Trace the path of the email and draw it here.
Trending now
This is a popular solution!
Step by step
Solved in 2 steps
