Nmap address-info NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/address-info.nse
Script categories: default, safe
Target service / protocol: -
Target network port(s): -
List of CVEs: -

Script Description

---

The address-info.nse script shows extra information about IPv6 addresses, such as embedded MAC or IPv4 addresses when available.

Some IP address formats encode extra information; for example some IPv6 addresses encode an IPv4 address or MAC address. This script can decode these address formats:

• IPv4-compatible IPv6 addresses,
• IPv4-mapped IPv6 addresses,
• Teredo IPv6 addresses,
• 6to4 IPv6 addresses,
• IPv6 addresses using an EUI-64 interface ID,
• IPv4-embedded IPv6 addresses,
• IPv4-translated IPv6 addresses and
• ISATAP Modified EUI-64 IPv6 addresses.

See RFC 4291 for general IPv6 addressing architecture and the definitions of some terms.

Address-info NSE Script Arguments

---

The address-info.nse script does not have any arguments.

Address-info NSE Script Example Usage

---

Here's an example of how to use the address-info.nse script:

nmap --script=address-info <target>

Address-info NSE Script Example Output

---

Here's a sample output from the address-info.nse script:

Nmap scan report for ::1.2.3.4
Host script results:
| address-info:
|   IPv4-compatible:
|_    IPv4 address: 1.2.3.4

Nmap scan report for ::ffff:1.2.3.4
Host script results:
| address-info:
|   IPv4-mapped:
|_    IPv4 address: 1.2.3.4

Nmap scan report for 2001:0:506:708:282a:3d75:fefd:fcfb
Host script results:
| address-info:
|   Teredo:
|     Server IPv4 address: 5.6.7.8
|     Client IPv4 address: 1.2.3.4
|_    UDP port: 49802

Nmap scan report for 2002:102:304::1
Host script results:
| address-info:
|   6to4:
|_    IPv4 address: 1.2.3.4

Nmap scan report for fe80::a8bb:ccff:fedd:eeff
Host script results:
| address-info:
|   IPv6 EUI-64:
|     MAC address:
|       address: aa:bb:cc:dd:ee:ff
|_      manuf: Unknown

Nmap scan report for 64:ff9b::c000:221
Host script results:
| address-info:
|   IPv4-embedded IPv6 address:
|_    IPv4 address: 192.0.2.33

Nmap scan report for ::ffff:0:c0a8:101
Host script results:
| address-info:
|   IPv4-translated IPv6 address:
|_    IPv4 address: 192.168.1.1

Address-info NSE Script Example XML Output

---

Here's a sample XML output from the address-info.nse script produced by providing the -oX <file> Nmap option:

 <table key="IPv4-mapped">
   <elem key="IPv4 address">1.2.3.4</elem>
 </table>

 <table key="IPv4-compatible">
   <elem key="IPv4 address">1.2.3.4</elem>
 </table>

 <table key="Teredo">
   <elem key="Server IPv4 address">5.6.7.8</elem>
   <elem key="Client IPv4 address">1.2.3.4</elem>
   <elem key="UDP port">49802</elem>
 </table>

 <table key="6to4">
   <elem key="IPv4 address">1.2.3.4</elem>
 </table>

 <table key="IPv6 EUI-64">
   <table key="MAC address">
     <elem key="address">aa:bb:cc:dd:ee:ff</elem>
     <elem key="manuf">Unknown</elem>
   </table>
 </table>

 <table key="IPv4-embedded IPv6 address">
   <elem key="IPv4 address">192.0.2.33</elem>
 </table>

 <table key="IPv4-translated IPv6 address">
   <elem key="IPv4 address">192.168.1.1</elem>
 </table>

Author

---

• David Fifield

References

---

• https://nmap.org/nsedoc/scripts/address-info.html
• https://github.com/nmap/nmap/tree/master/scripts/address-info.nse

See Also

---

Visit Nmap NSE Library for more scripts.