DNSViz vs Nmap

DNSViz is a free, open-source tool for visualizing DNS zone status and investigating DNSSEC deployment. It lays out a domain's authentication chain and resolution path, and identifies configuration errors. The graph can show delegations, record sets, negative responses, DNSKEY and DS records, signatures, wildcards, warnings and errors. It classifies DNS data as secure, bogus or insecure according to whether a trust chain reaches an anchor. The web service can run new analyses, but its maintenance mode means historical analyses cannot be loaded and new results cannot be saved to its database. For command-line use, the suite includes tools to query DNS, assess results and produce graph or text output. Queries use recursive resolvers by default, or authoritative servers when requested; graph output can be an image, DOT graph or HTML file. DNSViz documents installation on Linux, macOS and FreeBSD, among other Python-supported environments, and provides a Docker container. It is intended for understanding and troubleshooting DNSSEC, including pre-deployment checks of proposed zone and delegation changes.

Nmap is a free, open-source utility for discovering networks and auditing security. It uses raw IP packets to identify available hosts, services and versions, operating systems, and packet filters or firewalls. Scanning options include TCP and UDP ports, OS and version detection, and ping sweeps. Network administrators can use it to inventory systems, plan service upgrades, and monitor host or service uptime. The Nmap Scripting Engine runs bundled or user-written scripts in parallel for networking tasks such as discovery and vulnerability checks. The suite also includes Zenmap, a graphical interface and results viewer; Ncat for data transfer and debugging; Ndiff for comparing scan results; and Nping for packet generation and response analysis. Most port-scan types require privileged access to send and receive raw packets, although unprivileged users can run connect and FTP bounce scans. Nmap is not a comprehensive vulnerability scanner. End-user use is free, but redistribution in commercial products requires an OEM license. Quarterly OEM licenses start at $9,980.00 per 3 months for eligible small or startup companies.