What it can do
- Handle multiple PTR names
- Capture four octets into registers
- Reverse their order
- Remove the in-addr.arpa suffix
How the recipe works
Fork
Process each PTR record separately.
Register
Capture the four encoded octets.
Find / Replace
Rewrite them in ordinary IPv4 order.
Find / Replace
Remove the reverse-DNS suffix.
Demonstration
Sample input
42.113.0.203.in-addr.arpa
7.100.51.198.in-addr.arpaExpected result
203.0.113.42
198.51.100.7When to use it
- DNS investigation
- Log normalization
- Learning register-backed replacements
Adapt it
Add Sort and Unique when converting a large set of repeated records.
Source and verification
Adapted from mattnotmax CyberChef recipes. The explanation and sample are written for Serialize, use synthetic or documentation-safe data, and are checked against the current operation catalogue. The workflow runs locally without an external API call.