Skip to main content

Nslookup - Checking DNS Records on Windows

If you ever need to check the status of your DNS records, Windows has a built-in tool for just that task. There are a number of reasons you may want to do this, for example to check that any updates are correct or to troubleshoot issues accessing a particular service.

To access the tool you need to open up a command prompt, you should be able to find this under Start > All Programs > Accessories > Command Prompt


Checking For a Record

To check for a specific record you need to specifiy the record type, e.g. A, MX, TXT, and the host name you want to check. The following example shows how to check for any A records for rackspace.co.uk.



C:\Users\Administrator>nslookup -type=A rackspace.co.uk



Server:  cachens1.lon.rackspace.com



Address:  83.138.151.80




Non-authoritative answer:



Name:    rackspace.co.uk



Address:  212.64.133.165

The first two lines of output specify the server to which the request was directed, this will be the default server your system uses for DNS name resolution. The second section, which specifies a non-authoritative answer, gives the name of the record and the corresponding IP address. The answer is non-authoritative because the answer comes from a server, cachens1.lon.rackspace.com in this case, that is not the root source for those records.


Getting an Authoritative Answer

To get an authoritative answer we need to go to the source. This can be done by specifiying the authoritative name server at the end of the request. As you can see in the command and output of the example below the server the record is now checked against is ns.rackspace.com




C:\Users\Administrator>nslookup -type=A rackspace.co.uk ns.rackspace.com



Server:  ns.rackspace.com



Address:  69.20.95.4




Name:    rackspace.co.uk



Address:  212.64.133.165


Checking When a Cached Record Will Expire

DNS uses caching, this reduces the load on authoritative name servers but means that sometimes records can be out of date. If the authoritative and non-authoritative answers differ, this means you will have a cached response from the resolver name server you are using. The length of time a record is cached depends on its time-to-live (TTL) value. This is a number specified in seconds. To see how long a record will be cached for requires the debug switch.



C:\Users\Administrator>nslookup -type=A -debug rackspace.co.uk
------------



Got answer:

HEADER:

        opcode = QUERY, id = 1, rcode = NOERROR

        header flags:  response, want recursion, recursion avail.

        questions = 1,  answers = 1,  authority records = 2,  additional = 2

 

    QUESTIONS:

        80.151.138.83.in-addr.arpa, type = PTR, class = IN

    ANSWERS:

    ->  80.151.138.83.in-addr.arpa

        name = cachens1.lon.rackspace.com

        ttl = 2466 (41 mins 6 secs)

    AUTHORITY RECORDS:

    ->  151.138.83.in-addr.arpa

        nameserver = ns2.rackspace.com

        ttl = 2466 (41 mins 6 secs)

    ->  151.138.83.in-addr.arpa

        nameserver = ns.rackspace.com

        ttl = 2466 (41 mins 6 secs)

    ADDITIONAL RECORDS:

    ->  ns.rackspace.com

        internet address = 69.20.95.4

        ttl = 12982 (3 hours 36 mins 22 secs)

    ->  ns2.rackspace.com

        internet address = 65.61.188.4

        ttl = 12985 (3 hours 36 mins 25 secs)

 

------------

Server:  cachens1.lon.rackspace.com

Address:  83.138.151.80

 

------------

Got answer:

    HEADER:

        opcode = QUERY, id = 2, rcode = NOERROR

        header flags:  response, want recursion, recursion avail.

        questions = 1,  answers = 1,  authority records = 2,  additional = 2

 

    QUESTIONS:

        rackspace.co.uk, type = A, class = IN

    ANSWERS:

    ->  rackspace.co.uk

        internet address = 212.64.133.165

        ttl = 279 (4 mins 39 secs)

    AUTHORITY RECORDS:

    ->  rackspace.co.uk

        nameserver = ns.rackspace.com

        ttl = 17465 (4 hours 51 mins 5 secs)

    ->  rackspace.co.uk

        nameserver = ns2.rackspace.com

        ttl = 17465 (4 hours 51 mins 5 secs)

    ADDITIONAL RECORDS:

    ->  ns.rackspace.com

        internet address = 69.20.95.4

        ttl = 15754 (4 hours 22 mins 34 secs)

    ->  ns2.rackspace.com

        internet address = 65.61.188.4

        ttl = 15727 (4 hours 22 mins 7 secs)

 

------------

Non-authoritative answer:

Name:    rackspace.co.uk

Address:  212.64.133.165
  • The first "Got answer" section of this example is used to get the hostname of the server you are requesting the A record from, in this case cachens1.lon.rackspace.com.
  • The second "Got answer" section relates to your actual request.
  • The header section contains details about the type of request and its success.
  • The questions section shows that the request was for A records for rackspace.co.uk.
  • The answers section displays one record with an IP address of 212.64.133.165 and a TTL of 279 seconds (4 minutes 39 seconds).
  • The authority records section specifies the name servers that correspond to the domain
  • The additional records are A records for the name servers listed in the authority records section

So from this you can see that the name server being used by the client computer will keep reusing the same A record for rackspace.co.uk for the next 4 minutes and 39 seconds. If you were to run the same command on the authoritative name server you would see what the current maximum TTL for the record is.


Labels:

Comments

  1. UnknownApril 2, 2015 at 4:31 PM

    Good post. You can also get updated info about cloud and dns server on CloudOye who is a well known cloud hosting provider in all the regions.

    ReplyDelete

Post a Comment

Popular posts from this blog

How to make the email Address Dummy in Oracle Database?

How to make the email Address Dummy in Oracle Database? Query to make the email Address as dummy, update <tablename> set <Columnname> = '@' || <Columnname> where <Columnname>  is not null; Query to Remove the email Address as dummy, update <tablename> set <Columnname>= substr(<Columnname>,2,length(<Columnname>)) where <Columnname> is not null;
Post a Comment
Read more

ORA-06550, WMSYS.LT_EXPORT_PKG.schema_info_exp

When you do full database export it fails will following errors as below. Export: Release 11.2.0.1.0 - Production on Mon Sep 30 12:04:38 2013 Copyright (c) 1982, 2009, Oracle and/or its affiliates.  All rights reserved. ;;; Connected to: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production With the Partitioning, OLAP, Data Mining and Real Application Testing options Starting "SYS"."SYS_EXPORT_SCHEMA_01":  /******** AS SYSDBA schemas=user1 directory=data_pump_dir dumpfile=user1.dmp logfile=user1.log Estimate in progress using BLOCKS method... Processing object type SCHEMA_EXPORT/TABLE/TABLE_DATA Total estimation using BLOCKS method: 0 KB Processing object type SCHEMA_EXPORT/USER Processing object type SCHEMA_EXPORT/SYSTEM_GRANT Processing object type SCHEMA_EXPORT/ROLE_GRANT Processing object type SCHEMA_EXPORT/DEFAULT_ROLE ORA-39127: unexpected error from call to export_string :=WMSYS.LT_EXPORT_PKG.schema_info_exp('user1...
2 comments
Read more

How to clear screen in sqlplus

If you want to clear screen in sqlplus window there is small cmd that you need to remember which is below, SQL> select username from dba_users; USERNAME -------------------- BOCMS BOAUDIT  CKI8727 GRU9151 MNA9189 FRE9283  KKO8750  KMU8649 HME9041 ZLP1492 DBE9176  QRA8651  PFI8706 SQL> host cls Once you hit enter the screen will be cleared. SQL> select username from dba_users; USERNAME -------------------- BOCMS BOAUDIT  CKI8727 GRU9151 MNA9189 FRE9283  KKO8750  KMU8649 HME9041 ZLP1492 DBE9176  QRA8651  PFI8706 SQL>clear screen Once you hit enter the screen will be cleared.
Post a Comment
Read more