Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Windows server which is resolving a name. I do not know from where the address comes from: it should not be on DNS, and it is not on C:\Windows\system32\drivers\etc\hosts.

When I try looking the name up with nslookup it tells me that the name does not exist. However the ping tool is able to look the name up.

How can I find from where does the resolution come from?

share|improve this question
Open command prompt, and do "nslookup servername" and it will tell you what DNS server you are using, and that DNS server is what make the server name resolves to an IP address. You don't happen to be using OpenDNS do you? – Darius Feb 5 '14 at 15:02
nslookup says that it does not exist, and hosts file does not have it. Where can the IP address come from? – Envite Feb 5 '14 at 15:15
Flush your DNS. – shinjijai Feb 5 '14 at 15:31
What is the name you are seeing? – Zoredache Feb 5 '14 at 16:23
Have you checked your lmhosts file as well? – Alex McKenzie Feb 5 '14 at 16:40
up vote 1 down vote accepted

If you are not using a FQDN, and NSLookup can't find it but ping can, then it's probably a NetBIOS name being broadcasted by the remote machine and not a DNS entry, HOSTS entry, or anything on the local system, or anything handled by a central server (assuming you don't have a WINS server set up).

You can use nbtstat -r to get a list of host names that were resolved via NetBIOS (over TCP/IP) broadcasts.

Host name resolution generally uses the following sequence:

  1. The client checks to see if the name queried is its own.
  2. The client then searches a local Hosts file, a list of IP address and names stored on the local computer.
  3. Domain Name System (DNS) servers are queried.
  4. If the name is still not resolved, NetBIOS name resolution sequence is used as a backup. This order can be changed by configuring the NetBIOS node type of the client.

Above quote from MS KB172218: Microsoft TCP/IP Host Name Resolution Order

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .