Ping and DNS sometimes have different IPs for same host?
I have an issue which I'm sure is DNS related and can't find any solution for, so thought I'd throw it to you lot, since by and large you're a lot cleverer than I am. My network setup is fairly simple. A domain with an DNS all going through a broadband router. Every so often on my Vista machine (other machines seem OK) I won't be able to access other machine on the network; the IP settings don't change (192.168.1.x), but if I try to ping any other machine on my network, ping responds with "pinging 207.7.108.244", which is definitely not an address I have anywhere in my network or my local DNS it's always this same IP address. "ipconfig /displaydns" shows all the dns entries (many of which are mapped to 127.0.0.1 to stop adservers), but one has: mce ---------------------------------------- Record Name . . . . . : mce.mydomain.com Record Type . . . . . : 1 Time To Live . . . . : 1841 Data Length . . . . . : 4 Section . . . . . . . : Answer A (Host) Record . . . : 207.7.108.244 In this case, mce is the name of the machine I'm attempting to reach, whose IP is 192.168.1.52 (in the DNS and reverse lookup). How then has this changed to the 207 address? Nslookup responds with the correct IP. If I type "ipconfig /flushdns" and ping starts returning the correct IP address and everything is OK, although sometimes I have to disable/enable the network to get it working. I've run a virus scan and run the rootkitrevealer, both of which returned nothing. Any clues?ThanksDave
March 17th, 2009 2:14pm

Hi Dave, Thank you for your post. May I know if the domain name is mydomain.com? Based on my research, I suggest that we can boot the Windows Vista computer to Safe Mode with networking and check the results. Please also collect the MPS Report for our further research: Overview of the Microsoft Configuration Capture Utility (MPS_REPORTS) Please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the files and share the URLs with me. Hope this helps. Thanks. Nicholas Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
March 19th, 2009 1:38pm

NicholasNo, I just used mydomain.com as an example. This is an internal domain only. It's a sporadic issue, so I'll use the tool next time it happens and update the thread.Thanksd
March 19th, 2009 1:44pm

Hi Dave, Thank you for your response. Let's keep monitoring the issue. If it reoccurs, please feel free to let me know and I will help you perform some further research. Thanks.Nicholas Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
March 20th, 2009 9:06am

OK, this has happened again so I tried the reporting tools, but they don't work on Vista. I ran the network one manually though, just in case it could help and have uploaded the reports to http://cid-635c8e2bf4822d7c.skydrive.live.com/browse.aspx/.Public.After I'd done this the problem has disappeared, which could be a result of the things the tests did, or time related. I'm at a complete loss on this. While it's not urgent and easily cured, it is annoying.ThanksDave
March 21st, 2009 2:36pm

And this has just happened on my laptop, which is running XP, so I've uploaded the reports to http://cid-635c8e2bf4822d7c.skydrive.live.com/browse.aspx/.Public- ROOTEST_MPSReports.Given that this now happens on two machines, I can stop blaming Vista and start looking at the DNS itself.
Free Windows Admin Tool Kit Click here and download it now
March 24th, 2009 6:13pm

Hi, Thank you for your update. After researching, I would like to suggest the following: 1. Please perform a full system virus and malware scan to ensure that the computers are all virus free. 2. Please check the host file on the problematic computers to see if there are some abnormal entries. 3. After checking the MPS log on Windows XP and found the default gateway and DNS are the same, this may be not proper. Please let me know if the DNS Server is a Windows-based server or what the device the Windows XP computer is connecting to. IP Address . . . . . . . . : 192.168.1.103 Subnet Mask. . . . . . . . : 255.255.255.0 Default Gateway. . . . . . : 192.168.1.254 DHCP Server. . . . . . . . : 192.168.1.6 Primary WINS Server. . . . : 192.168.1.6 Lease Obtained . . . . . . : 23 March 2009 12:15:12 Lease Expires. . . . . . . : 02 April 2009 16:15:12 Dns Servers. . . . . . . . : 192.168.1.254 Meanwhile, please also adjust the DNS settings if it is possible. You can also refer to the following documents: Verifying DNS Design and Configuration http://technet.microsoft.com/en-us/library/aa996996(EXCHG.65).aspx 4. Please run the command to see if the DNS works properly. When the problem occurs, please run the following command on the problematic computer:>nslookup>mce.mydomain.com(your domain name.)Will the correct IP addresses be returned? At this time, please also collect the MPS Report on your server for our further research: For Windows Server 2003 Overview of the Microsoft Configuration Capture Utility (MPS_REPORTS) For Windows Server 2008 Microsoft Product Support Reporting Tool - PFE edition Please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the files and share the URLs with me. Hope this helps. Thanks.Nicholas Li - MSFT
March 26th, 2009 8:11am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics