Odd DNS resolution

  • Thread starter Thread starter jeremy
  • Start date Start date
J

jeremy

Here is a log of some command line commands to illustrate
the problem I will explain later.

C:\DOCUME~1\CAROL>ping www.cnet.com

Pinging home.cnet.com [206.16.0.147] with 32 bytes of
data:

Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=23ms TTL=242

Ping statistics for 206.16.0.147:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 23ms, Maximum = 25ms, Average = 24ms

C:\DOCUME~1\CAROL>ping www.classmates.com

Pinging www.classmates.com [127.0.0.1] with 32 bytes of
data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\DOCUME~1\CAROL>ping 65.243.133.80

Pinging 65.243.133.80 with 32 bytes of data:

Reply from 65.243.133.80: bytes=32 time=48ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236

Ping statistics for 65.243.133.80:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 46ms, Maximum = 48ms, Average = 46ms


As you can see, i have connectivity to both the internet
and the dns server of my isp. I do get accurate dns
resolution with most websites (cnet nslookup and ping).

The dns server of my isp does send a correct ip
resolution for www.classmates.com (nslookup) but the
problem I am obiously having is that whenever I try and
ping classmates, or browse it in IE, I am getting a DNS
resolution of the loopback.

FYI, the MS Firewall is turned off, and the DNS client
service is off. With both of those on or a combination
of the two does not provide me with any different results.

This problem is occuring with all users on this XP @home
computer.

I also have a XP Prof on the same network witht the same
network settings and I have no problems with any DNS
resolutions.

One thing I wonder if there is someplace the DNS
resolutions are cached somewhere besides in the DNS
client.

If anybody has any ideas on where I should look for any
caches, or for that matter any idea at all what is going
wrong I would be greatly appreciative.

Thanks for any time/trouble expended on this highly
frustrating problem I'm experiencing =)
 
Doh, sorry about the incomplete log from the command
line, here is the complete log =/

C:\DOCUME~1\user>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : hostname
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP EN1207D-TX
PCI 10/100 Fast Ethern
et Adapter
Physical Address. . . . . . . . . : physical
address
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
206.13.28.12
Lease Obtained. . . . . . . . . . : Saturday,
August 09, 2003 10:59:56 A
M
Lease Expires . . . . . . . . . . : Tuesday,
September 02, 2003 10:59:56
AM

C:\DOCUME~1\user>nslookup
Default Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12
Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12

Non-authoritative answer:
Name: home.cnet.com
Address: 206.16.0.147
Aliases: www.cnet.com
Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12

Non-authoritative answer:
Name: www.classmates.com
Address: 65.243.133.80

C:\DOCUME~1\user>ping www.cnet.com

Pinging home.cnet.com [206.16.0.147] with 32 bytes of
data:

Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=23ms TTL=242

Ping statistics for 206.16.0.147:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 23ms, Maximum = 25ms, Average = 24ms

C:\DOCUME~1\user>ping www.classmates.com

Pinging www.classmates.com [127.0.0.1] with 32 bytes of
data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\DOCUME~1\user>ping 65.243.133.80

Pinging 65.243.133.80 with 32 bytes of data:

Reply from 65.243.133.80: bytes=32 time=48ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236

Ping statistics for 65.243.133.80:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 46ms, Maximum = 48ms, Average = 46ms
 
Hello,

That's a normal function if you have www.classmates.com in your
"hosts" file..

search for the file named hosts on your hard drive, edit it with
notepad, and remove the lines for classmates..

on my XP home system it is in c:\windows\system32\drivers\etc

If you have/had any AD blocking software, it was probally put there by
it.

Larry


Doh, sorry about the incomplete log from the command
line, here is the complete log =/

C:\DOCUME~1\user>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : hostname
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP EN1207D-TX
PCI 10/100 Fast Ethern
et Adapter
Physical Address. . . . . . . . . : physical
address
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
206.13.28.12
Lease Obtained. . . . . . . . . . : Saturday,
August 09, 2003 10:59:56 A
M
Lease Expires . . . . . . . . . . : Tuesday,
September 02, 2003 10:59:56
AM

C:\DOCUME~1\user>nslookup
Default Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12
Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12

Non-authoritative answer:
Name: home.cnet.com
Address: 206.16.0.147
Aliases: www.cnet.com
Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12

Non-authoritative answer:
Name: www.classmates.com
Address: 65.243.133.80

C:\DOCUME~1\user>ping www.cnet.com

Pinging home.cnet.com [206.16.0.147] with 32 bytes of
data:

Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=23ms TTL=242

Ping statistics for 206.16.0.147:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 23ms, Maximum = 25ms, Average = 24ms

C:\DOCUME~1\user>ping www.classmates.com

Pinging www.classmates.com [127.0.0.1] with 32 bytes of
data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\DOCUME~1\user>ping 65.243.133.80

Pinging 65.243.133.80 with 32 bytes of data:

Reply from 65.243.133.80: bytes=32 time=48ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236

Ping statistics for 65.243.133.80:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 46ms, Maximum = 48ms, Average = 46ms
 
Does the following file contain anything:

C:\WINDOWS\system32\drivers\etc\hosts

That's all I can think of, really. If an nslookup to the DNS server(s)
configured for your machine give the right results, then that's all I can
think it could be.

You can clear the DNS cache by typing:
ipconfig /flushdns

However, it should get cleared when you reboot.

Oli


jeremy said:
Doh, sorry about the incomplete log from the command
line, here is the complete log =/

C:\DOCUME~1\user>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : hostname
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP EN1207D-TX
PCI 10/100 Fast Ethern
et Adapter
Physical Address. . . . . . . . . : physical
address
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
206.13.28.12
Lease Obtained. . . . . . . . . . : Saturday,
August 09, 2003 10:59:56 A
M
Lease Expires . . . . . . . . . . : Tuesday,
September 02, 2003 10:59:56
AM

C:\DOCUME~1\user>nslookup
Default Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12
Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12

Non-authoritative answer:
Name: home.cnet.com
Address: 206.16.0.147
Aliases: www.cnet.com
Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12

Non-authoritative answer:
Name: www.classmates.com
Address: 65.243.133.80

C:\DOCUME~1\user>ping www.cnet.com

Pinging home.cnet.com [206.16.0.147] with 32 bytes of
data:

Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=23ms TTL=242

Ping statistics for 206.16.0.147:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 23ms, Maximum = 25ms, Average = 24ms

C:\DOCUME~1\user>ping www.classmates.com

Pinging www.classmates.com [127.0.0.1] with 32 bytes of
data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\DOCUME~1\user>ping 65.243.133.80

Pinging 65.243.133.80 with 32 bytes of data:

Reply from 65.243.133.80: bytes=32 time=48ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236

Ping statistics for 65.243.133.80:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 46ms, Maximum = 48ms, Average = 46ms
 
That was it, thanks a lot guys (Oli Restorick and Larry)
that was the one spot I have yet to come across in my
many troubleshooting days (well not too many =p)

There was an entry in the hosts file and edited it and it
is now workin like a charm thanks again =)

-----Original Message-----
Doh, sorry about the incomplete log from the command
line, here is the complete log =/

C:\DOCUME~1\user>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : hostname
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP EN1207D- TX
PCI 10/100 Fast Ethern
et Adapter
Physical Address. . . . . . . . . : physical
address
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
206.13.28.12
Lease Obtained. . . . . . . . . . : Saturday,
August 09, 2003 10:59:56 A
M
Lease Expires . . . . . . . . . . : Tuesday,
September 02, 2003 10:59:56
AM

C:\DOCUME~1\user>nslookup
Default Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12
Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12

Non-authoritative answer:
Name: home.cnet.com
Address: 206.16.0.147
Aliases: www.cnet.com
Server: dns1-sac.scrmca.sbcglobal.net
Address: 206.13.31.12

Non-authoritative answer:
Name: www.classmates.com
Address: 65.243.133.80

C:\DOCUME~1\user>ping www.cnet.com

Pinging home.cnet.com [206.16.0.147] with 32 bytes of
data:

Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=25ms TTL=242
Reply from 206.16.0.147: bytes=32 time=23ms TTL=242

Ping statistics for 206.16.0.147:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 23ms, Maximum = 25ms, Average = 24ms

C:\DOCUME~1\user>ping www.classmates.com

Pinging www.classmates.com [127.0.0.1] with 32 bytes of
data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\DOCUME~1\user>ping 65.243.133.80

Pinging 65.243.133.80 with 32 bytes of data:

Reply from 65.243.133.80: bytes=32 time=48ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236
Reply from 65.243.133.80: bytes=32 time=46ms TTL=236

Ping statistics for 65.243.133.80:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 46ms, Maximum = 48ms, Average = 46ms
.
 
Back
Top