Solved

NSLOOKUP Output

Posted on 2013-01-27
11
943 Views
Last Modified: 2013-01-29
I am trying  the NSLOOKUP, but it gives me the same result either with hostname or IP address:

H:\>nslookup 10.10.10.10
Server:  UnKnown
Address:  10.10.10.11

Name:aaaa.bbb.com
Address: 10.10.10.10

H:\>nslookup 10.10.10.11
Server:  UnKnown
Address:  10.10.10.11

*** UnKnown can't find 10.10.10.11: Non-existent domain
===============
I am not sure the meaning of "Unknow" keyword. I believe it refers to DNS server name that resolved the address, but why it is not showing its name.

Thank you
0
Comment
Question by:jskfan
11 Comments
 
LVL 17

Assisted Solution

by:Lior Karasenti
Lior Karasenti earned 84 total points
ID: 38825869
If reverse DNS for that IP address is not setup correctly, then NSLOOKUP cannot determine the name associated with the IP address.
On Windows Vista/2008, it then says "Default Server: UnKnown".
On earlier Windows versions, it displays the error message "*** Can't find server name for address ...".



http://www.simpledns.com/kb.aspx?kbid=1159
0
 

Author Comment

by:jskfan
ID: 38825875
it resolved the name:
Name:aaaa.bbb.com
Address: 10.10.10.10


But, the server that has resolved it , is Unknown.
why is it showing Unknow ??
0
 
LVL 5

Assisted Solution

by:msallam
msallam earned 250 total points
ID: 38825889
What is not resolving to a name is the DNS server IP (10.10.10.11) and NOT the name next to the nslookup command.

To confirm type:
nslookup 10.10.10.11

The second nslookup proves this.
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:jskfan
ID: 38825925
That s what I was asking ...why the DNS server name is showin as Unknow ?
0
 
LVL 5

Assisted Solution

by:msallam
msallam earned 250 total points
ID: 38825988
Simply because the client - from where you are running the nslookup - is not able to resolve the name.
This can be because of several reasons:
1. It is not available in the resolver cache (on the client)
2. The DNS server does not have an A record for itself (or for the IP 10.10.10.11 if it has several IPs).

The solution can be by ensuring the DNS server has an A record for the IP 10.10.10.11, or the entry is added manually to the hosts file on the machine you are running the nslookup from.
0
 
LVL 40

Assisted Solution

by:footech
footech earned 83 total points
ID: 38826003
See the first response that liorkr gave.  Again, because you don't have a reverse DNS (PTR) record set up for the IP.
0
 

Author Comment

by:jskfan
ID: 38826271
if I ping with -a switch I get the hostname

ping -a 10.10.10.10

Pinging aaaa.bbb.com [10.10.10.10] with 32 bytes of data:
Reply from 10.10.10.10: bytes=32 time=1ms TTL=57
Reply from 10.10.10.10: bytes=32 time=1ms TTL=57
Reply from 10.10.10.10: bytes=32 time=1ms TTL=57
Reply from 10.10.10.10: bytes=32 time=1ms TTL=57

Ping statistics for 10.10.10.10:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 1ms, Average = 1ms


======================

it is just the DNS server name that does not show up ....
As Msallam said above:
<<2. The DNS server does not have an A record for itself (or for the IP 10.10.10.11 if it has several IPs).
>>

the company does not use Windows DNS, it uses infoblox.
something must have been changed, because I used to get the DNS server name when I run Nslookup against any host in the network
0
 
LVL 5

Assisted Solution

by:msallam
msallam earned 250 total points
ID: 38826376
On Infoblox (as with most other DNS servers) the A record for the DNS server is auto-created with any DNS zone created (under a view - if you are using DNS views-).

Just to rule out the possibility that the auto-created record is not the one for the IP (10.10.10.11) - assuming that you your Infoblox is configured to listen on more than one IP -; can you add an A record in the hosts file of the affected machine?

You can check - if it is a local issue or not - by replicating the scenario from another machine (preferably on the same subnet) to know if the problem is from the machine itself or is it a common thing.

Let us know about the results.
0
 
LVL 16

Accepted Solution

by:
Bruno PACI earned 83 total points
ID: 38826474
Hi,

It's not about a "A" record... it's about a "PTR" record, of if you prefer a reverse DNS record, that sort of record that associate a name to an IP address (a "A" record associates an IP address to a name).

What NSLOOKUP tries to do before launching your DNS request is just to give your the fqdn name of the dns server it will interrogate. So it takes the IP address of the DNS server and makes a reverse DNS query for this address.
So the first lines in the result that say
"Server:  UnKnown
Address:  10.10.10.11"
just mean that there is no PTR (reverse DNS) record for this IP address 10.10.10.11 and that NSLOOKUP is unable to give you the name of the DNS server... It's not a big deal anyway because PTR records are not a requirement.
The PTR record as nothing to do with the A record as you can have a A record but no PTR...

So even if your DNS server has its own A records in the DNS zone the NSLOOKUP won't be able to resolve 10.10.10.11 to a name because to do that it needs a reverse DNS record (PTR).
As I said, this is not really important. What is important is that NSLOOKUP is able to resolve the query you asked him. The first 2 lines of the NSLOOKUP answer is not important.
0
 
LVL 5

Expert Comment

by:msallam
ID: 38826722
It is as liorkr, footech and Pac1B stated. Thx for pointing it out.

It is the PTR record is the one that maps an IP to a name.
It is a mistake from my end that I stated and built on it what was stated later. I was a bit busy with other stuff.

This (PTR record) is Auto-created too when you create the relevant reverse-lookup zone on Infoblox.

Check if it the same case for other machines as I proposed in the last post.
0
 

Author Closing Comment

by:jskfan
ID: 38834133
Thank you guys
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question