Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!asuvax!noao!arizona!arizona.edu!telcom.arizona.edu!leonard
From: leonard@telcom.arizona.edu (Aaron Leonard)
Newsgroups: comp.protocols.tcp-ip.domains
Subject: Re: Finding hostnames of a domain
Message-ID: <1991Apr16.145313.530@arizona.edu>
Date: 16 Apr 91 21:53:12 GMT
References: <1991Apr15.211341.7704@nrcnet0.nrc.ca>
Reply-To: Leonard@Arizona.EDU
Distribution: world,local
Organization: University of Arizona Telecommunications
Lines: 34
Nntp-Posting-Host: osprey.telcom.arizona.edu

In article <1991Apr15.211341.7704@nrcnet0.nrc.ca>, root@nrcnet0.nrc.ca 
(Operator) writes:

|>How do I use the NSLOOKUP to find the names of all the hosts of a domain. 

You can try:
$ nslookup
> ls foo.dom > filename

which may or may not work.

|>I am trying to locate the Network Ad. for locus.com. I don't have a clue what
|>machine he uses. So I thought if I could list all the machines within
|>locus.com, maybe some machine might give me a clue.

A better approach would be this:

$ nslookup
> set type=soa
> locus.com

The mail address (in username.fully.qualified.domain.name format) of the
person responsible for the (nameservice for) the locus.com domain
will be given.

Actually in this case, we find that locus.com is an MX-only domain (i.e.
does not appear to have any hosts directly attached to the Internet.)

So you can drop back to plan #2, which is to send mail to 
postmaster@locus.com.  (All machines that receive mail are required
to have a mailbox called "postmaster" which is read by a human on
a more or less regular basis.)

Aaron