Solved

How to query client  socket (DNS) name cache?

Posted on 1998-11-14
5
194 Views
Last Modified: 2013-12-23
  We are beginning a long-term transition from WINS to DNS at our shop, and I'm getting comfortable with the server side of DNS. However, I'd like to be able to have more client side understanding. I'm getting comfortable with nslookup, but want more *client* side info than nslookup provides.

   Specifically, I want to be able to query (as opposed to clear) the client's "DNS" cache, preferrably the entire cache, but will settle for a single name if I have to. I want to be able to see the time remaining in the TTL for a name. I know arp -a and nbtstat -c are similar utils to what I'm looking for, but they don't do this.

   What utility (or API) will? I'm really interested in the answer to this for every OS I'll be working with: NT, 95/98, AIX, Solaris, Linux, but will clearly be happy if I can get the answer for NT and 95/98.

   Thanks in advance!
0
Comment
Question by:morgan1
  • 2
  • 2
5 Comments
 

Expert Comment

by:dsrikump
ID: 1565770
morgan1,
 I'm sort of confused by your question. Are you asking about how to find out what's in a clients arp cache? Or are you trying to find out about how to learn more about different clients and servers located elsewhere on a network?

 In the case that you are looking to find out more about utilities that can be used to find out more about other clients, you need look no further than what's in the standard TCP/IP suite. There is the "ping" command used to send a query packet to another host to determine if it can receive and respond to packets. There is "tracert" (traceroute in almost everyone else's vocabulary except windows) which can help you determine where your packets are going and how many "hops" it takes to get there. This can tell you about TTL decrementation as well.

 If that wasn't what you were looking for then please rephrase the question. Thanks and good luck!
0
 

Expert Comment

by:dsrikump
ID: 1565771
Looks like I forgot to add something.

"ipconfig /all" is a great command for finding out information that you are sitting at.

If you were looking to find out what's in other machines arp cache, this might be an exercise in futility because it is a very dynamic file that changes every 12 minutes or so. WinNT and 95 both flush the arp cache of entries that are not marked as static after about 12 minutes. But if this is indeed what you want to do then you can install rconsole from the NT resource kit on the machine that you want to execute commands on and run rclient from your machine. This supposedly acts like a telnet client! Then you should be able to execute the arp -a command and see the results in your rclient window. Although I have never had to do this first-hand.
0
 

Author Comment

by:morgan1
ID: 1565772
  Sorry, I thought that I had been specific enough the first time. What I want to look at is NOT the client's ARP cache, which tracks the association between IP to MAC on the client, but the client's NAME cache, which tracks the association from NAME to IP. My DNS server has one of these, and my client does, too. On the NetBIOS side, the NBTSTAT -c command shows the Microsoft *equivalent* to the information I'm seeking about DNS on my client PC.

   For instance, if I ping www.experts-exchange.com from my PC, my company DNS server will talk to the DNS servers on the Internet to locate the DNS records for this DNS name. My DNS server caches the response in it's cache before delivering the answer to my PC. My understanding is that my PC caches the answer, too, so that it doesn't requery my DNS server if I immediately re-ping that web server. I want to be able to look at my PC's name cache. I am interested in this largely as a troubleshooting tool. If I adjust the TTL on a DNS name or domain that I administer on my company's DNS server, I want to be able to monitor the effect within the network by DNS clients as they use that name.

   I want to understand the environment that I support as much as possible and be able to monitor the effect of changes that I make to that environment. I guess that I can fall back to sniffing the network beside my client when performing the testing, but consider that to be an inelegant solution to this question.

   Again, any thoughts or ideas would be appreciated. Thanks!
0
 
LVL 2

Accepted Solution

by:
irp earned 100 total points
ID: 1565773
Your PC (Client) does *not* cache DNS entries. I thought it did but I just did a little test. Load www.experts-exchange.com, stop DNS on DNS server, reload www.experts-exchange.com. It didn't work. Hence, PC (Win95) does not cache DNS.
0
 

Author Comment

by:morgan1
ID: 1565774
Fair enough. This mirrors my own suspicion, and probably holds true on NT as well. Thanks for your input on this.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

FIPS stands for the Federal Information Processing Standardisation and FIPS 140-2 is a collection of standards that are generically associated with hardware and software cryptography. In most cases, people can refer to this as the method of encrypti…
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now