• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4077
  • Last Modified:

can ping ONLY by HOSTNAME but not ip address

Actually, I'm not actually even having this problem, but I just wanted to know how would it be possible for a computer to ping websites by hostname, but times out for its corresponding ip address.

Usually it's the other way around where you can ping by ip but not hostname, which would indicate a dns error that can sometimes be resolved by flushing the dns. Just curious to know what the technical explanation is if someone was only able to ping by hostname and not ip.
0
CHSnake
Asked:
CHSnake
1 Solution
 
lrmooreCommented:
hostnames can sometimes resolve to multiple IP's and where dns will round-robin a request, one or more servers can be down and not answer an icmp ping so they can't be reached by IP address, but can by dns name.
It would be rare, but it is possible.
It could also be that there is a local hosts file entry for the host name where the system will resolve a hostname to IP address 1.2.3.4 which answers only if addressed by hostname, whereas an nslookup may resolve it to a different IP address that will not respond if you try to ping the IP address.

0
 
IanThCommented:
dns is a very robust service that virtually never fails. A local resolver corruption can cause this by having faulty dns data cached. The local resolver cache is a local dns system effectively
0
 
jdunneukCommented:
if you can ping a hostname and not a ip it could be that the actually server is using a nat or perhaps some adaptation of pat
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
QuietRootCommented:
the only solution i can see is that the resolved dest ip is diff then the dst ip you're issuing.
and yeah, off course, the round-robin situation it's true as well.
i'm not shore it is possible to filter icmp traffic by checking if the Echo Request used a name server resolution process or was send with an ip address in the first place.

can u share an example?
cheers,
BC
0
 
CHSnakeAuthor Commented:
Ok, I just had an issue where someone was able to ping yahoo, but not its ip, where normally they can. This of course caused a no route situation. I just wasn't sure how that happened, and what the solution would've been.

I guess I should've checked to see if the same condition existed for other websites, to narrow down whether it was happening for all websites that respond to icmp, or if yahoo just happened to be having this issue at that time.
0
 
QuietRootCommented:
i'm shore it's the second option :)
i'm sticking to my opinion here :D

it's the round robin situation that we're talking about and i see 2 ways of explaining this:
1) the first ping went to an ip add (ping [ip]) and the second time the dns resolved to another dst (ping [host]) due to the round robin process. and somehow you didn't noticed that there was 2 diff host addresses.
2) somehow after the replay from the first ping there was some kinda of network problem between you machine and the dst add :|.

anyway, as i recall, and i've mentioned this above, i am not familiar with any policy that can filter icmp traffic by checking if the package dst hostname was resolved before, in order to find the destination ip address, or not. :).
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now