Usage
Scanning
DNS

DNS

The DNS probe constructs a basic query (default A record for example.com) and records metadata from any response.

rmap scan --path resolvers.txt dns --domain example.com --query-type AAAA \
  --output-file dns.csv --columns target,port,dns_response_code,dns_answer_count,alias

Configuration

  • --port <u16> – destination port (default 53).
  • --domain <str> – query domain (default example.com).
  • --query-type <str> – record type (A, AAAA, MX, TXT, NS, SOA).

Tags emitted

  • dns_query_id – transaction ID echoed in responses.
  • dns_response_code – response code (0 for NOERROR, etc.).
  • dns_answer_count – number of answers returned.
  • port – responder port.
  • alias / alias_prefix – dealiaser verdict.

DNS servers often rate-limit or block repeated queries; tune --pps and --timeout accordingly.

TCP SYN-ACKNTP