Looking Up Domains, Hosts, Contacts, and Names with
Whois
CS 3000 -- Lab Assignment #5
DIRECTIONS: Before you start,
scan the man page for whois.
When you do the lab, type whois commands equivalent to
the ones you see typed below, and examine the output. Ask
questions.
Whois is a good command to use if you want to
- find out the names of the DNS servers for a domain,
- find the name of an administrative contact for a domain,
- find out the name of a company or organization whose domain
name you know
- find out the domain name for a company or organization
whose name you know,
- find out names of some hosts in a network whose domain name
you know,
That's about all. The information you get from whois can be
useful when a domain is making problems for you (sending junk
mail, for example). The information is not guaranteed to be
accurate, but it is what the official name registry has on file.
Frankly whois is not the easiest program to use. It
has an arcane, under-documented syntax. When you are out on
your own "doing your thing," you should probably try simple web
searches first, and keep whois as an alternative to
try when other methods do not pan out.
/* get info about a domain */
john@pollux: whois caltech.edu
Whois Server Version 1.1
Domain names in the .com, .net, and .org domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: CALTECH.EDU
Registrar: NETWORK SOLUTIONS, INC.
/* The line below tells us which host to query */
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com
Name Server: TYBALT.CALTECH.EDU
Name Server: NSX.LBL.GOV
Name Server: MERCUTIO.NI.CALTECH.EDU
Name Server: TEPID.NI.CALTECH.EDU
>>> Last update of whois database: Thu, 30 Dec 99 02:19:02 EST <<<
The Registry database contains ONLY .COM, .NET, .ORG, .EDU domains and
Registrars.
/* Try again, specifying the correct host to query */
john@pollux: whois -h whois.networksolutions.com caltech.edu
The Data in Network Solutions' WHOIS database is provided by Network
Solutions for information purposes, and to assist persons in obtaining
information about or related to a domain name registration record.
Network Solutions does not guarantee its accuracy. By submitting a
WHOIS query, you agree that you will use this Data only for lawful
purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail
(spam); or (2) enable high volume, automated, electronic processes
that apply to Network Solutions (or its systems). Network Solutions
reserves the right to modify these terms at any time. By submitting
this query, you agree to abide by this policy.
Registrant:
California Institute of Technology (CALTECH-DOM)
Information Technology Services
014-81
Pasadena, CA 91125
Domain Name: CALTECH.EDU
Administrative Contact:
Logan, Robert S (RSL9) BOB@CALTECH.EDU
(626) 395-4631
Technical Contact, Zone Contact:
Network Operations Center (NO304-ORG) noc@CALTECH.EDU
626-395-4602
Billing Contact:
Logan, Robert S (RSL9) BOB@CALTECH.EDU
(626) 395-4631
Record last updated on 28-Jul-1998.
Record created on 06-Jan-1986.
Database last updated on 30-Dec-1999 14:13:30 EST.
Domain servers in listed order:
MERCUTIO.NI.CALTECH.EDU 131.215.254.99
NSX.LBL.GOV 131.243.64.3
TYBALT.CALTECH.EDU 131.215.139.100
TEPID.NI.CALTECH.EDU 131.215.254.100
/* Do it again, with wild card for getting "entire
membership." Note the use of the escape character "\" in
order to make the shell ignore the "*" and pass it through
literally to whois. Of course, whois will
use it in its own way as a type of wild card character. */
john@pollux: whois -h whois.networksolutions.com \*caltech.edu
The Data in Network Solutions' WHOIS database is provided by Network
Solutions for information purposes, and to assist persons in obtaining
information about or related to a domain name registration record.
Network Solutions does not guarantee its accuracy. By submitting a
WHOIS query, you agree that you will use this Data only for lawful
purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail
(spam); or (2) enable high volume, automated, electronic processes
that apply to Network Solutions (or its systems). Network Solutions
reserves the right to modify these terms at any time. By submitting
this query, you agree to abide by this policy.
Registrant:
California Institute of Technology (CALTECH-DOM)
Information Technology Services
014-81
Pasadena, CA 91125
Domain Name: CALTECH.EDU
Administrative Contact:
Logan, Robert S (RSL9) BOB@CALTECH.EDU
(626) 395-4631
Technical Contact, Zone Contact:
Network Operations Center (NO304-ORG) noc@CALTECH.EDU
626-395-4602
Billing Contact:
Logan, Robert S (RSL9) BOB@CALTECH.EDU
(626) 395-4631
Record last updated on 28-Jul-1998.
Record created on 06-Jan-1986.
Database last updated on 30-Dec-1999 14:13:30 EST.
Domain servers in listed order:
MERCUTIO.NI.CALTECH.EDU 131.215.254.99
NSX.LBL.GOV 131.243.64.3
TYBALT.CALTECH.EDU 131.215.139.100
TEPID.NI.CALTECH.EDU 131.215.254.100
There are 16 known hosts:
CNS.CALTECH.EDU 131.215.135.4
CSVAX.CS.CALTECH.EDU 131.215.131.131
EQL.CALTECH.EDU 131.215.29.1
ESUS.CACR.CALTECH.EDU 131.215.145.137
GAP.CCO.CALTECH.EDU 131.215.139.43
IPAC.CALTECH.EDU 134.4.10.10
MERCUTIO.NI.CALTECH.EDU 131.215.254.99
NS.KLAB.CALTECH.EDU 131.215.4.133
NS.VIS.CALTECH.EDU 131.215.27.1
OVRO.OVRO.CALTECH.EDU 192.100.16.2
RIEFFEL.CALTECH.EDU 131.215.185.125
SGI1.WAG.CALTECH.EDU 131.215.33.4
SMAUG.BBB.CALTECH.EDU 131.215.5.202
SMAUG.CNS.CALTECH.EDU 131.215.137.60
TEPID.NI.CALTECH.EDU 131.215.254.100
TYBALT.CALTECH.EDU 131.215.139.100
To single out one record, look it up with "!xxx", where xxx is the
handle, shown in parenthesis following the name, which comes first.
/* Use the form that matches company or organization names */
john@pollux: whois -h whois.networksolutions.com \.banjo
The Data in Network Solutions' WHOIS database is provided by Network
Solutions for information purposes, and to assist persons in obtaining
information about or related to a domain name registration record.
Network Solutions does not guarantee its accuracy. By submitting a
WHOIS query, you agree that you will use this Data only for lawful
purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail
(spam); or (2) enable high volume, automated, electronic processes
that apply to Network Solutions (or its systems). Network Solutions
reserves the right to modify these terms at any time. By submitting
this query, you agree to abide by this policy.
BANJO IN THE HOLLOW (BANJO-IN-THE-HOLLOW-DOM) BANJO-IN-THE-HOLLOW.ORG
BANJO MORIO (ARAIGUMA2-DOM) ARAIGUMA.NET
BANJO, BANJO (BB18353) BANJO@SWARE.8M.COM 465645665 (FAX) 45645645645
Banjo Buddies Dixieland Band (BANJOBUDDIES-DOM) BANJOBUDDIES.COM
Banjo Buddies Inc. (BANJOMINNOW3-DOM) BANJOMINNOW.COM
Banjo Capitals (TECHSTOCKER-DOM) TECHSTOCKER.COM
Banjo Capitals (NETSTOCKNOW-DOM) NETSTOCKNOW.COM
Banjo Capitals (INFOSTOX-DOM) INFOSTOX.COM
Banjo Capitals (STOCKCAMPUS-DOM) STOCKCAMPUS.COM
Banjo Capitals, Inc. (BANJOCAPITALS-DOM) BANJOCAPITALS.COM
Banjo Capitals, Inc. (38916-N2-DOM) 38916.COM
Banjo Charters (BANJOCHARTERS-DOM) BANJOCHARTERS.COM
Banjo Consulting (ROHTO2-DOM) ROHTO.ORG
Banjo Creek Farms (BEESANTIQUES-DOM) BEESANTIQUES.COM
Banjo Creek Farms (BANJOCREEKFARMS-DOM) BANJOCREEKFARMS.COM
Banjo Creek Farms (HORSEDRAWNADVENTURES-DOM) HORSEDRAWNADVENTURES.COM
Banjo Express (BANJOEXPRESS-DOM) BANJOEXPRESS.COM
Banjo Liquid Handling Products (BANJOCORP-DOM) BANJOCORP.COM
Banjo Maker, Inc. (BANJOMAKER-DOM) BANJOMAKER.COM
Banjo Morio (BANJO6-DOM) BANJO.ORG
Banjo News Letter (BANJONEWS-DOM) BANJONEWS.COM
Banjo News Letter (BANJONEWS2-DOM) BANJONEWS.NET
Banjo Pete (BANJOPETE-DOM) BANJOPETE.COM
Banjo Radio Group (BANJORADIO-DOM) BANJORADIO.COM
Banjo Safari (BANJOSAFARI-DOM) BANJOSAFARI.COM
Banjo Soft (BANJOSOFT-DOM) BANJOSOFT.COM
Banjo Wire Technology (BANJOWIRE-DOM) BANJOWIRE.COM
Banjo and Guitar Studio (CELTICGUITARMUSIC-DOM) CELTICGUITARMUSIC.COM
Banjo, AAron (AB5606) globe@MINDSPRING.COM 404-523-6520
Banjo, Ayokunbi (AB18239) yinkab@ONLH.COM 281-556-1131
Banjo, B (BB999) grovenetwork@GROVENET.DEMON.CO.UK
+44-181-535 0080
Banjo, Felita (FBN22) Felitaakeem@NETZERO.COM
4103238130 (FAX) 4103236178
Banjo, G Mr (GMB87) gerhardb@INNSITE.CO.UK
00 44 181 897 3071 (FAX) 00 44
Banjo, Marcus (MBR85) admin@NIZON.COM 212 740 7444
Banjo, Mr (MB882) grovenet@GROVENET.DEMON.CO.UK +44-181-535 0081
Banjo, Tunde (TB13448) tunde@OZ.SUNFLOWER.ORG 816-333-2818
Banjo, Tunji (TB9573) Tunban@YAHOO.COM 01714744528 (FAX) 01713667920
banjo, jo (JB38204) jeroenvv@YAHOO.COM na (FAX) na
banjo, tunji (TB9730) tunban@HOTMAIL.COM
01714744528 (FAX) 01713667920
To single out one record, look it up with "!xxx", where xxx is the
handle, shown in parenthesis following the name, which comes first.
/* Now match a multi-word company name. */
john@pollux: whois -h whois.networksolutions.com \."banjo consulting"
The Data in Network Solutions' WHOIS database is provided by Network
Solutions for information purposes, and to assist persons in obtaining
information about or related to a domain name registration record.
Network Solutions does not guarantee its accuracy. By submitting a
WHOIS query, you agree that you will use this Data only for lawful
purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail
(spam); or (2) enable high volume, automated, electronic processes
that apply to Network Solutions (or its systems). Network Solutions
reserves the right to modify these terms at any time. By submitting
this query, you agree to abide by this policy.
Registrant:
Banjo Consulting (ROHTO2-DOM)
Laivanvarustajankatu 9 B
Helsinki, 00140
FI
Domain Name: ROHTO.ORG
Administrative Contact, Technical Contact, Zone Contact:
Paunio, Pekka T (PTP21) pekka.paunio@KUNTALIITTO.FI
358-400-876 424 (FAX) 358-9-6842 6440
Billing Contact:
Paunio, Pekka T (PTP21) pekka.paunio@KUNTALIITTO.FI
358-400-876 424 (FAX) 358-9-6842 6440
Record last updated on 05-Nov-1998.
Record created on 05-Nov-1998.
Database last updated on 30-Dec-1999 14:13:30 EST.
Domain servers in listed order:
NS1.REQUEST.NET 206.151.75.9
NS2.REQUEST.NET 208.211.228.3
NS3.REQUEST.NET 209.27.13.3
/* Want to try more and varied queries? Get current help
info from server*/
john@pollux: whois -h whois.networksolutions.com \?
The Data in Network Solutions' WHOIS database is provided by Network
Solutions for information purposes, and to assist persons in obtaining
information about or related to a domain name registration record.
Network Solutions does not guarantee its accuracy. By submitting a
WHOIS query, you agree that you will use this Data only for lawful
purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail
(spam); or (2) enable high volume, automated, electronic processes
that apply to Network Solutions (or its systems). Network Solutions
reserves the right to modify these terms at any time. By submitting
this query, you agree to abide by this policy.
To look up a domain name, just type it in. WHOIS will search the Shared
Registry and remote registrars for you. Use the ALl keyword ahead of
your target to search in a handle, name, hostname, or other field. WHOIS
will do a very broad search on your input. To narrow down the search or
change WHOIS' behavior, put one or more of the following keywords/characters
(shown below with their minimum abbreviation in all CAPS) before your input.
To find only a certain record TYPE: To search only a specific FIELD:
----------------------------------- -------------------------------
DOmain GAteway HAndle or '!'
GRoup HOst Mailbox or contains '@'
NEtwork ORganization NAme or leading '.'
PErson^M ASn
Other WHOIS keywords:
EXPand or '*' Show all parts of display without asking.
Full or '=' Show detailed display for EACH match.
HElp Enters help program for full documentation.
PArtial or trailing '.' Match targets STARTING with given string.
LOcaldomain Same as DOmain, but just in local database.
Q, QUIT, or hit RETURN Exits WHOIS.
SUBdisplay or '%' Show users of host, hosts on net, etc.
SUMmary or '$' Show summary always, even if just one match.
Add a trailing '.' to your input (or use the PArtial keyword) to make it a
partial search that matches everything STARTING with your input: "name mack."
finds names "Mack", "Mackall", "MacKay", etc. "Arpanet" and "MIlnet" are
the same as "HOst" except they only match hosts on those networks.
EXAMPLES:
dom root .smyth.
host nic full %nic
net 128.15 !lynn^M
To guarantee matching only a single record, look it up by its handle with a
handle-only search: "lynn" finds records with name, handle, mailbox, etc of
lynn, but "!lynn" or "ha lynn" finds ONLY the single record whose HANDLE is
lynn. In record summary lines, the handle is shown in parenthesis after the
name, which is first on the line.
Type "HELP" for more complete help; hit RETURN to exit.
/* The commands described above seem to work alright if we put
the parameter sets in quotes. For example:*/
john@pollux: whois -h whois.networksolutions.com "full or book j..."
The Data in Network Solutions' WHOIS database is provided by Network
Solutions for information purposes, and to assist persons in obtaining
information about or related to a domain name registration record.
Network Solutions does not guarantee its accuracy. By submitting a
WHOIS query, you agree that you will use this Data only for lawful
purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail
(spam); or (2) enable high volume, automated, electronic processes
that apply to Network Solutions (or its systems). Network Solutions
reserves the right to modify these terms at any time. By submitting
this query, you agree to abide by this policy.
BOOK JACKETS (E514-OR) bookjack@primenet.com
BOOK JACKETS
7215 Hannum Ave
CULVER CITY, CA 90230
US
3103970570
Record last updated on 30-Jun-2000.
Database last updated on 4-Jan-2001 14:43:50 EST.
To see this organization record with registered members, repeat the command
with a star ('*') before the name; or, use '%' to show JUST the registered
members.
----------
BOOK JACKETS (BJ781-ORG) no.valid.email@worldnic.net
BOOK JACKETS
7215 HANNUM AVE
CULVER CITY, CA 90230
US
310 397 0570
Record last updated on 30-Jun-2000.
Database last updated on 4-Jan-2001 14:43:50 EST.
To see this organization record with registered members, repeat the command
with a star ('*') before the name; or, use '%' to show JUST the registered
members.
----------
BOOK JACKETS (Y553-OR) bookjack@primenet.com
BOOK JACKETS
7215 Hannum Ave
CULVER CITY, CA 90230
US
3103970570
Record last updated on 30-Jun-2000.
Database last updated on 4-Jan-2001 14:43:50 EST.
To see this organization record with registered members, repeat the command
with a star ('*') before the name; or, use '%' to show JUST the registered
members.
----------
BOOK JACKETS (B560-OR) bookjack@primenet.com
BOOK JACKETS
7215 Hannum Ave
CULVER CITY, CA 90230
US
3103970570
Record last updated on 30-Jun-2000.
Database last updated on 4-Jan-2001 14:43:50 EST.
To see this organization record with registered members, repeat the command
with a star ('*') before the name; or, use '%' to show JUST the registered
members.
----------
BOOK JACKETS (L578-OR) bookjack@primenet.com
BOOK JACKETS
7215 Hannum Ave
CULVER CITY, CA 90230
US
3103970570
Record last updated on 30-Jun-2000.
Database last updated on 4-Jan-2001 14:43:50 EST.
To see this organization record with registered members, repeat the command
with a star ('*') before the name; or, use '%' to show JUST the registered
members.
----------
BOOK JACKETS (BJ2399-ORG) bookjack@primenet.com
BOOK JACKETS
7215 Hannum Ave
CULVER CITY, CA 90230
US
3103970570 fax: 3103970571
Record last updated on 12-Aug-2000.
Database last updated on 4-Jan-2001 14:43:50 EST.
To see this organization record with registered members, repeat the command
with a star ('*') before the name; or, use '%' to show JUST the registered
members.
----------
BOOK JACKETS (Z555-OR) bookjack@primenet.com
BOOK JACKETS
7215 Hannum Ave
CULVER CITY, CA 90230
US
3103970570
Record last updated on 30-Jun-2000.
Database last updated on 4-Jan-2001 14:43:50 EST.
To see this organization record with registered members, repeat the command
with a star ('*') before the name; or, use '%' to show JUST the registered
members.
----------
BOOK JACKETS (Y552-OR) bookjack@primenet.com
BOOK JACKETS
7215 Hannum Ave
CULVER CITY, CA 90230
US
3103970570
Record last updated on 30-Jun-2000.
Database last updated on 4-Jan-2001 14:43:50 EST.
To see this organization record with registered members, repeat the command
with a star ('*') before the name; or, use '%' to show JUST the registered
members.
----------
book jungle (BJ806-ORG) cedric1982@HOTMAIL.COM
IRC
droomfabriek
VTM , NY 17502
UNITED STATES
5810359
Record last updated on 19-Dec-1998.
Database last updated on 4-Jan-2001 14:43:50 EST.
To see this organization record with registered members, repeat the command
with a star ('*') before the name; or, use '%' to show JUST the registered
members.