NSLOOKUP oddity

Discussion in 'DNS Server' started by Luke, Oct 21, 2009.

  1. Luke

    Luke Guest

    Hi All,
    I've never really noticed this before, but whenever someone types NSLOOKUP
    it will bring up the console and you can talk to DNS for queries and stuff.

    However when you do this, at the top of the screen it lists the name and IP
    of the DNS server.. the name on ours alternates between 4 things which all
    point to the same IP. They are:
    domaindnszones.domain.com
    forestdnszones.domain.com
    servername.domain.com
    domain.com

    Name lookups all seem to work properly and it doesn't really cause any
    issues besides confusion as to whats going on.

    Is this normal behavior or is something else at play?

    Cheers.
     
    Luke, Oct 21, 2009
    #1
    1. Advertisements

  2. Luke

    Chris Dent Guest

    That's a bit odd... the name comes from a Reverse Lookup on the IP
    address. See if PTR records exist for each of those? The PTR should only
    really exist for servername.domain.com.

    Chris
     
    Chris Dent, Oct 21, 2009
    #2
    1. Advertisements


  3. I agree. The only thing I can think of is the machine's IP has multiple PTR
    records pointing to that list of names the poster posted.


    --
    Ace

    This posting is provided "AS-IS" with no warranties or guarantees and
    confers no rights.

    Please reply back to the newsgroup or forum for collaboration benefit among
    responding engineers, and to help others benefit from your resolution.

    Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
    2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer

    For urgent issues, please contact Microsoft PSS directly. Please check
    http://support.microsoft.com for regional support phone numbers.
     
    Ace Fekay [MCT], Oct 21, 2009
    #3
  4. thanks for the post luke. if you look in the reverse lookup zone for the ip
    address of your dns server, you will likely find that there are entries for
    each of these four names. the reason nslookup is alternating between them is
    because this is standard behavior with dns round robin.

    if you have aging enabled for the reverse lookup zone you can get a good
    idea of whether they were statically added or not by turning on advanced
    features and checking for a timestamp.
    --
    hth.

    /rich

    http://cbfive.com
    http://cbfive.com/blogs
     
    Rich Crandall, Nov 4, 2009
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.