Nmap llmnr-resolve NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/llmnr-resolve.nse
Script categories: discovery, safe, broadcast
Target service / protocol: -
Target network port(s): -
List of CVEs: -

Script Description

---

The llmnr-resolve.nse script resolves a hostname by using the LLMNR (Link-Local Multicast Name Resolution) protocol.

The script works by sending a LLMNR Standard Query containing the hostname to the 5355 UDP port on the 224.0.0.252 multicast address. It listens for any LLMNR responses that are sent to the local machine with a 5355 UDP source port. A hostname to resolve must be provided.

For more information, see:

• http://technet.microsoft.com/en-us/library/bb878128.aspx

Llmnr-resolve NSE Script Arguments

---

This is a full list of arguments supported by the llmnr-resolve.nse script:

llmnr-resolve.hostname

Hostname to resolve.

llmnr-resolve.timeout

Max time to wait for a response. (default 3s)

max-newtargets

Sets the number of the maximum allowed new targets. If set to 0 or less then there is no limit. The default value is 0.

newtargets

If specified, lets NSE scripts add new targets.

- - -
To use these script arguments, add them to the Nmap command line using the --script-args arg1=value,[arg2=value,..] syntax. For example:

nmap --script=llmnr-resolve --script-args llmnr-resolve.hostname=value,llmnr-resolve.timeout=value <target>

Llmnr-resolve NSE Script Example Usage

---

Here's an example of how to use the llmnr-resolve.nse script:

nmap --script llmnr-resolve --script-args 'llmnr-resolve.hostname=examplename' -e wlan0

Llmnr-resolve NSE Script Example Output

---

Here's a sample output from the llmnr-resolve.nse script:

Pre-scan script results:
| llmnr-resolve:
|   acer-PC : 192.168.1.4
|_  Use the newtargets script-arg to add the results as targets

Llmnr-resolve NSE Script Example XML Output

---

There is no sample XML output for this module. However, by providing the -oX <file> option, Nmap will produce a XML output and save it in the file.xml file.

Author

---

• Hani Benhabiles

References

---

• https://nmap.org/nsedoc/scripts/llmnr-resolve.html
• https://github.com/nmap/nmap/tree/master/scripts/llmnr-resolve.nse
• http://technet.microsoft.com/en-us/library/bb878128.aspx

See Also

---

Visit Nmap NSE Library for more scripts.

The llmnr-resolve.nse script may fail with the following error messages. Check for the possible causes by using the code snippets highlighted below found in the script source code. This can often times help in identifying the root cause of the problem.

Couldn't get interface for %s

---

Here is a relevant code snippet related to the "Couldn't get interface for %s" error message:

176:	    interface = nmap.get_interface_info(interface)
177:	  else
178:	    interface = getInterface(mcast)
179:	  end
180:	  if not interface then
181:	    return stdnse.format_output(false, ("Couldn't get interface for %s"):format(mcast))
182:	  end
183:	
184:	  -- Launch listener thread
185:	  stdnse.new_thread(llmnrListen, interface, timeout, result)
186:	  -- Craft raw query