Obtains hostnames, IPv4 and IPv6 addresses through IPv6 Node Information Queries.
IPv6 Node Information Queries are defined in RFC 4620. There are three useful types of queries:
- qtype=2: Node Name
- qtype=3: Node Addresses
- qtype=4: IPv4 Addresses
Some operating systems (Mac OS X and OpenBSD) return hostnames in response to qtype=4, IPv4 Addresses. In this case, the hostnames are still shown in the "IPv4 addresses" output row, but are prefixed by "(actually hostnames)".
nmap -6 <target>
| ipv6-node-info: | Hostnames: mac-mini.local | IPv6 addresses: fe80::a8bb:ccff:fedd:eeff, 2001:db8:1234:1234::3 |_ IPv4 addresses: mac-mini.local