Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How does one banner grab DNS? I'm able to banner grab other services such as HTTP/FTP/SMTP but for DNS it's not immediately obvious.

Typically for HTTP I use nc with HEAD / HTTP/1.1 {ENTER}{ENTER}.

I had assumed that it'd be possible with DNS if you know the initial structure of the query, but I can't seem to find documentation on this.

share|improve this question

closed as off topic by John Gardeniers, Michael Hampton, Ward, Scott Pack, HopelessN00b Sep 28 '12 at 10:58

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 3 down vote accepted

DNS does not have a "banner" to grab. The closest equivalent is a magic query for version.bind. CHAOS TXT which will work on most BIND nameservers.
You can perform this query using dig:

dig version.bind CHAOS TXT

If that does not work you can use fingerprinting techniques to determine the remote server's version -- the fpdns tool is one option for that, but there are others.

share|improve this answer
That did it, thanks. – jersten Sep 12 '12 at 3:09

Not the answer you're looking for? Browse other questions tagged or ask your own question.