Jump to content

DIG.exe Usage for HTTPS Site


Recommended Posts

Hi All..

We are using Websense to filter our Internet traffic. The only problem I have with it is when a user accesses a secure site (HTTPS), I don't get the domain name in the report, but the IP (https://1.1.1.1)

When I used DIG to try and find the domain, it came back with a verisign site which makes me think the secure site is messing up the domain lookup. I've tried this on several IP's and they mostly find the verisign.com site and I know that's not the site the user is trying to reach. Most of the time it's a secure proxy site.

Can DIG be used to identify the domain name of a site being accessed over SSL? If not, are there any tools that do it (or websites)?

Thanks. :blink:

Link to comment
Share on other sites

  • 3 weeks later...

Hi All..

We are using Websense to filter our Internet traffic. The only problem I have with it is when a user accesses a secure site (HTTPS), I don't get the domain name in the report, but the IP (https://1.1.1.1)

When I used DIG to try and find the domain, it came back with a verisign site which makes me think the secure site is messing up the domain lookup. I've tried this on several IP's and they mostly find the verisign.com site and I know that's not the site the user is trying to reach. Most of the time it's a secure proxy site.

Can DIG be used to identify the domain name of a site being accessed over SSL? If not, are there any tools that do it (or websites)?

Thanks. :blink:

Sorry for the tardy response. I am not sure what you are trying to do with this information, but you may not be aware that the mapping between host names (domain names) and IP addreses is not necessarily one-to one in either direction.

When you use dig to do a "reverse lookup" (i.e., to get a host name from an IP address), you will get the host name that is recorded in the DNS "PTR" (pointer) record. However, it's possible that other host names will resolve to this address as well. I don't know off the top of my head whether there is any tool that can give you this information, it is very dynamic.

-- rick

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...