Script ipv6-node-info

Script types: hostrule
Categories: default, discovery, safe

Script Summary

Obtains hostnames, IPv4 and IPv6 addresses through IPv6 Node Information Queries.

IPv6 Node Information Queries are defined in RFC 4620. There are three useful types of queries:

  • qtype=2: Node Name
  • qtype=3: Node Addresses
  • qtype=4: IPv4 Addresses

Some operating systems (Mac OS X and OpenBSD) return hostnames in response to qtype=4, IPv4 Addresses. In this case, the hostnames are still shown in the "IPv4 addresses" output row, but are prefixed by "(actually hostnames)".

Example Usage

nmap -6 <target>

Script Output

| ipv6-node-info:
|   Hostnames: mac-mini.local
|   IPv6 addresses: fe80::a8bb:ccff:fedd:eeff, 2001:db8:1234:1234::3
|_  IPv4 addresses: mac-mini.local



  • David Fifield