Ask Your Question

determine hostname from dump

asked 2020-06-28 16:24:32 +0000

uragnorson gravatar image

I am doing a HTTPS request wit curl . curl --negotiate -u: https://svchost

When I do a reverse IP lookup on svchost, I get 3 entries

reverse-ip domain name pointer svchostA
reverse-ip domain name pointer svchost
reverse-ip domain name pointer svchostB

Is there a way to see what host I connected to when doing my curl? I would like to figure out if its svchost, svchostA, svchostB?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2020-06-30 05:29:08 +0000

Eddi gravatar image

I assume that your string "reverse-ip" matches the IP address observed in the trace file.

It looks like the server "svchost" is available through three different host names. The web servers configuration links the available content to a certain directory on the server.

From the client perspective it is hard to tell if a load balancer or similar device redirects traffic to multiple servers (and if the session is really as sticky as it should be)

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2020-06-28 16:24:32 +0000

Seen: 546 times

Last updated: Jun 30 '20