NSLOOKUP oddity

Hi All,
I've never really noticed this before, but whenever someone types NSLOOKUP
it will bring up the console and you can talk to DNS for queries and stuff.

However when you do this, at the top of the screen it lists the name and IP
of the DNS server.. the name on ours alternates between 4 things which all
point to the same IP. They are:
domaindnszones.domain.com
forestdnszones.domain.com
servername.domain.com
domain.com

Name lookups all seem to work properly and it doesn't really cause any
issues besides confusion as to whats going on.

Is this normal behavior or is something else at play?

Cheers.

That's a bit odd... the name comes from a Reverse Lookup on the IP
address. See if PTR records exist for each of those? The PTR should only
really exist for servername.domain.com.

Chris

"Chris Dent" <> wrote in message
news:...
>
> That's a bit odd... the name comes from a Reverse Lookup on the IP
> address. See if PTR records exist for each of those? The PTR should only
> really exist for servername.domain.com.
>
> Chris


I agree. The only thing I can think of is the machine's IP has multiple PTR
records pointing to that list of names the poster posted.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

thanks for the post luke. if you look in the reverse lookup zone for the ip
address of your dns server, you will likely find that there are entries for
each of these four names. the reason nslookup is alternating between them is
because this is standard behavior with dns round robin.

if you have aging enabled for the reverse lookup zone you can get a good
idea of whether they were statically added or not by turning on advanced
features and checking for a timestamp.
--
hth.

/rich

http://cbfive.com
http://cbfive.com/blogs


"Luke" wrote:

> Hi All,
> I've never really noticed this before, but whenever someone types NSLOOKUP
> it will bring up the console and you can talk to DNS for queries and stuff.
>
> However when you do this, at the top of the screen it lists the name and IP
> of the DNS server.. the name on ours alternates between 4 things which all
> point to the same IP. They are:
> domaindnszones.domain.com
> forestdnszones.domain.com
> servername.domain.com
> domain.com
>
> Name lookups all seem to work properly and it doesn't really cause any
> issues besides confusion as to whats going on.
>
> Is this normal behavior or is something else at play?
>
> Cheers.