Skip to content

Convert PTR record names to IPv4 addresses

Split record names, capture reversed octets, restore normal order, and remove the DNS suffix.

Install in Serialize

What it can do

  • Handle multiple PTR names
  • Capture four octets into registers
  • Reverse their order
  • Remove the in-addr.arpa suffix

How the recipe works

Fork

Process each PTR record separately.

Register

Capture the four encoded octets.

Find / Replace

Rewrite them in ordinary IPv4 order.

Find / Replace

Remove the reverse-DNS suffix.

Demonstration

Sample input

42.113.0.203.in-addr.arpa
7.100.51.198.in-addr.arpa

Expected result

203.0.113.42
198.51.100.7

When to use it

  • DNS investigation
  • Log normalization
  • Learning register-backed replacements

Adapt it

Add Sort and Unique when converting a large set of repeated records.

Source and verification

Adapted from mattnotmax CyberChef recipes. The explanation and sample are written for Serialize, use synthetic or documentation-safe data, and are checked against the current operation catalogue. The workflow runs locally without an external API call.

Navigation

Type to search…

↑↓ navigate↵ selectEsc close