determine hostname from dump

asked 2020-06-28 16:24:32 +0000

I am doing a HTTPS request wit curl . curl --negotiate -u: https://svchost

When I do a reverse IP lookup on svchost, I get 3 entries

reverse-ip domain name pointer svchostA
reverse-ip domain name pointer svchost
reverse-ip domain name pointer svchostB

Is there a way to see what host I connected to when doing my curl? I would like to figure out if its svchost, svchostA, svchostB?

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2020-06-30 05:29:08 +0000

Eddi

2379 ●8 ●48 ●59

I assume that your string "reverse-ip" matches the IP address observed in the trace file.

It looks like the server "svchost" is available through three different host names. The web servers configuration links the available content to a certain directory on the server.

From the client perspective it is hard to tell if a load balancer or similar device redirects traffic to multiple servers (and if the session is really as sticky as it should be)

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-06-28 16:24:32 +0000

Seen: 729 times

Last updated: Jun 30 '20

determine hostname from dump edit

1 Answer