Re: Nslookup not showng TTL
On Thu, Oct 15, 2009 at 09:06:56AM +0100, John Horne wrote: > Hello, Hi, > Using BIND 9.5.1 it seems that the nslookup command is not showing the > TTL value of found records. It makes no difference if I set 'debug' or > 'd2'. Example: > > == > nslookup > > set debug > > www.plymouth.ac.uk > Server: 127.0.0.1 > Address:127.0.0.1#53 > > > QUESTIONS: > www.plymouth.ac.uk, type = A, class = IN > ANSWERS: > -> www.plymouth.ac.uk > canonical name = extranet.plymouth.ac.uk. > -> extranet.plymouth.ac.uk > internet address = 141.163.163.185 > AUTHORITY RECORDS: > -> plymouth.ac.uk > nameserver = dns0.plymouth.ac.uk. > -> plymouth.ac.uk > nameserver = dns1.plymouth.ac.uk. > ADDITIONAL RECORDS: > -> dns0.plymouth.ac.uk > internet address = 141.163.1.250 > -> dns1.plymouth.ac.uk > internet address = 141.163.177.1 > > www.plymouth.ac.uk canonical name = extranet.plymouth.ac.uk. > Name: extranet.plymouth.ac.uk > Address: 141.163.163.185 > > > == > > > How can I see the TTL value using nslookup? I'm not sure how force nslookup to show TTL but the `dig` utility is far more better tool for getting such information: $ dig www.plymouth.ac.uk ; <<>> DiG 9.7.0a3-RedHat-9.7.0-0.5.a3.fc13 <<>> www.plymouth.ac.uk ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17054 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 2 ;; QUESTION SECTION: ;www.plymouth.ac.uk.IN A ;; ANSWER SECTION: www.plymouth.ac.uk. 3143IN CNAME extranet.plymouth.ac.uk. extranet.plymouth.ac.uk. 85943 IN A 141.163.163.185 ;; AUTHORITY SECTION: plymouth.ac.uk. 85943 IN NS dns1.cs.strath.ac.uk. plymouth.ac.uk. 85943 IN NS dns0.plymouth.ac.uk. plymouth.ac.uk. 85943 IN NS dns1.plymouth.ac.uk. plymouth.ac.uk. 85943 IN NS dns2.cs.strath.ac.uk. ;; ADDITIONAL SECTION: dns1.cs.strath.ac.uk. 42744 IN A 130.159.196.126 dns2.cs.strath.ac.uk. 42743 IN A 130.159.196.125 Regards, Adam -- Adam Tkac, Red Hat, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Nslookup not showng TTL
On Thu, 2009-10-15 at 10:47 +0200, Adam Tkac wrote: > On Thu, Oct 15, 2009 at 09:06:56AM +0100, John Horne wrote: > > > > How can I see the TTL value using nslookup? > > I'm not sure how force nslookup to show TTL but the `dig` utility is > far more better tool for getting such information: > I agree, it's not for me though :-) I have to teach some Windows people about the DNS, and wanted to show them that they could use 'nslookup' on either the Linux box provided, or their own Windows PC's. In this instance the TTL is important. So I was hoping that the MS and BIND nslookup commands would display something pretty much similar to each other so as not to confuse the people too much. As far as I can tell no BIND 9 nslookup command shows the TTL. I am currently looking at an 8.2.3 version to see if I can patch the 9.5.1 one to display TTL's again. It may, however, be better to introduce them to dig rather than having to maintain the nslookup command. John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Nslookup not showng TTL
If you didn't know, you can download dig for Windows. For example: http://ftp.isc.org/isc/bind9/9.6.1-P1/BIND9.6.1-P1.zip Just stick dig.exe and the dll files in a directory that makes sense in your environment and enjoy! HTH - Original Message From: John Horne To: Bind users Sent: Thursday, October 15, 2009 5:46:27 AM Subject: Re: Nslookup not showng TTL On Thu, 2009-10-15 at 10:47 +0200, Adam Tkac wrote: > On Thu, Oct 15, 2009 at 09:06:56AM +0100, John Horne wrote: > > > > How can I see the TTL value using nslookup? > > I'm not sure how force nslookup to show TTL but the `dig` utility is > far more better tool for getting such information: > I agree, it's not for me though :-) I have to teach some Windows people about the DNS, and wanted to show them that they could use 'nslookup' on either the Linux box provided, or their own Windows PC's. In this instance the TTL is important. So I was hoping that the MS and BIND nslookup commands would display something pretty much similar to each other so as not to confuse the people too much. As far as I can tell no BIND 9 nslookup command shows the TTL. I am currently looking at an 8.2.3 version to see if I can patch the 9.5.1 one to display TTL's again. It may, however, be better to introduce them to dig rather than having to maintain the nslookup command. John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Nslookup not showng TTL
In article , John Horne wrote: > On Thu, 2009-10-15 at 10:47 +0200, Adam Tkac wrote: > > On Thu, Oct 15, 2009 at 09:06:56AM +0100, John Horne wrote: > > > > > > How can I see the TTL value using nslookup? > > > > I'm not sure how force nslookup to show TTL but the `dig` utility is > > far more better tool for getting such information: > > > I agree, it's not for me though :-) > > I have to teach some Windows people about the DNS, and wanted to show > them that they could use 'nslookup' on either the Linux box provided, or > their own Windows PC's. ... Please don't. nslookup is a very blunt tool, occasionally comes very close to lying to you and, as you've found, obscures some information that you actually want to see. Like this: > ... In this instance the TTL is important. ... > ... It may, however, be better to introduce them > to dig rather than having to maintain the nslookup command. Do it. Use host if you have to but stay away from nslookup. Sam -- Sam Wilson one of hostmas...@ed.ac.uk Network Team, IT Infrastructure Information Services, The University of Edinburgh Edinburgh, Scotland, UK ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Nslookup not showng TTL
John Horne wrote: On Thu, 2009-10-15 at 10:47 +0200, Adam Tkac wrote: On Thu, Oct 15, 2009 at 09:06:56AM +0100, John Horne wrote: How can I see the TTL value using nslookup? I'm not sure how force nslookup to show TTL but the `dig` utility is far more better tool for getting such information: I agree, it's not for me though :-) I have to teach some Windows people about the DNS, and wanted to show them that they could use 'nslookup' on either the Linux box provided, or their own Windows PC's. In this instance the TTL is important. So I was hoping that the MS and BIND nslookup commands would display something pretty much similar to each other so as not to confuse the people too much. As far as I can tell no BIND 9 nslookup command shows the TTL. I am currently looking at an 8.2.3 version to see if I can patch the 9.5.1 one to display TTL's again. It may, however, be better to introduce them to dig rather than having to maintain the nslookup command. Removing features from nslookup gets us that much closer to KILLING and BURYING it. Forever. If I had a nickel for every time someone mis-read the output of nslookup and mistook the nameserver's name, for the name of the server they're actually looking up, well, let's just say I probably wouldn't be posting to bind-users from my work account... (Fortunately nslookup's whole "won't do a lookup because I can't reverse-resolve my resolver" bogosity isn't really an issue at Chrysler, since we maintain proper reverse mappings, but that's another popular "nslookup sucks, don't use it"-category posting to this mailing list) - Kevin ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Nslookup not showng TTL
In article , Kevin Darcy wrote: > (Fortunately nslookup's whole "won't do a lookup because I can't > reverse-resolve my resolver" bogosity isn't really an issue at Chrysler, > since we maintain proper reverse mappings, but that's another popular > "nslookup sucks, don't use it"-category posting to this mailing list) Fortunately (or not - it would be another nail) that bogosity is gone from recent nslookups. Sam ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
RE: Nslookup not showng TTL
You can do an "ipconfig /displaydns" to see some TTL info. Frank -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of John Horne Sent: Thursday, October 15, 2009 3:07 AM To: Bind users Subject: Nslookup not showng TTL Hello, Using BIND 9.5.1 it seems that the nslookup command is not showing the TTL value of found records. It makes no difference if I set 'debug' or 'd2'. Example: == nslookup > set debug > www.plymouth.ac.uk Server: 127.0.0.1 Address:127.0.0.1#53 QUESTIONS: www.plymouth.ac.uk, type = A, class = IN ANSWERS: -> www.plymouth.ac.uk canonical name = extranet.plymouth.ac.uk. -> extranet.plymouth.ac.uk internet address = 141.163.163.185 AUTHORITY RECORDS: -> plymouth.ac.uk nameserver = dns0.plymouth.ac.uk. -> plymouth.ac.uk nameserver = dns1.plymouth.ac.uk. ADDITIONAL RECORDS: -> dns0.plymouth.ac.uk internet address = 141.163.1.250 -> dns1.plymouth.ac.uk internet address = 141.163.177.1 www.plymouth.ac.uk canonical name = extranet.plymouth.ac.uk. Name: extranet.plymouth.ac.uk Address: 141.163.163.185 > == How can I see the TTL value using nslookup? Thanks, John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Nslookup not showng TTL
On Thu, 2009-10-15 at 13:15 -0400, Kevin Darcy wrote: > > > Removing features from nslookup gets us that much closer to KILLING and > BURYING it. Forever. > So why does the ISC still distribute it? (Although I guess the answer may simply be "because people still use it".) Don't get me wrong here - I've been using dig for years, and only use nslookup if I have to on my Windows laptop at work, on the Linux/UNIX systems dig is only used. If nslookup was no longer present in the BIND distribution then that doesn't bother me at all. John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Nslookup not showng TTL
On 15-Oct-2009, at 16:03, John Horne wrote: On Thu, 2009-10-15 at 13:15 -0400, Kevin Darcy wrote: Removing features from nslookup gets us that much closer to KILLING and BURYING it. Forever. So why does the ISC still distribute it? (Although I guess the answer may simply be "because people still use it".) There was a while there that nslookup printed a big warning banner telling you not to use it because it'd been deprecated and would go away any day now. That doesn't seem to be there anymore, sadly. I kinda wish it would just vanish. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Nslookup not showng TTL
In message <76d7097b-28a4-4bbb-a2c8-05bf5b822...@conundrum.com>, Matthew Pounse tt writes: > > On 15-Oct-2009, at 16:03, John Horne wrote: > > > On Thu, 2009-10-15 at 13:15 -0400, Kevin Darcy wrote: > >>> > >> Removing features from nslookup gets us that much closer to KILLING > >> and > >> BURYING it. Forever. > >> > > So why does the ISC still distribute it? > > (Although I guess the answer may simply be "because people still use > > it".) > > There was a while there that nslookup printed a big warning banner > telling you not to use it because it'd been deprecated and would go > away any day now. That doesn't seem to be there anymore, sadly. I > kinda wish it would just vanish. We lost the battle to get rid of nslookup. Index: bin/dig/nslookup.c === RCS file: /proj/cvs/prod/bind9/bin/dig/nslookup.c,v retrieving revision 1.122 diff -u -r1.122 nslookup.c --- bin/dig/nslookup.c 6 May 2009 23:47:50 - 1.122 +++ bin/dig/nslookup.c 15 Oct 2009 12:45:26 - @@ -373,6 +373,7 @@ printrdata(&rdata); } dns_rdata_reset(&rdata); + printf("\tttl = %u\n", rdataset->ttl); loopresult = dns_rdataset_next(rdataset); } } -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Nslookup not showng TTL
Kevin Darcy wrote: > John Horne wrote: >> On Thu, 2009-10-15 at 10:47 +0200, Adam Tkac wrote: >> >>> On Thu, Oct 15, 2009 at 09:06:56AM +0100, John Horne wrote: >>> How can I see the TTL value using nslookup? >>> I'm not sure how force nslookup to show TTL but the `dig` utility is >>> far more better tool for getting such information: >>> >>> >> I agree, it's not for me though :-) >> >> I have to teach some Windows people about the DNS, and wanted to show >> them that they could use 'nslookup' on either the Linux box provided, or >> their own Windows PC's. In this instance the TTL is important. So I was >> hoping that the MS and BIND nslookup commands would display something >> pretty much similar to each other so as not to confuse the people too >> much. >> >> As far as I can tell no BIND 9 nslookup command shows the TTL. I am >> currently looking at an 8.2.3 version to see if I can patch the 9.5.1 >> one to display TTL's again. It may, however, be better to introduce them >> to dig rather than having to maintain the nslookup command. >> > Removing features from nslookup gets us that much closer to KILLING and > BURYING it. Forever. > > If I had a nickel for every time someone mis-read the output of nslookup > and mistook the nameserver's name, for the name of the server they're > actually looking up, well, let's just say I probably wouldn't be posting > to bind-users from my work account... > > (Fortunately nslookup's whole "won't do a lookup because I can't > reverse-resolve my resolver" bogosity isn't really an issue at Chrysler, > since we maintain proper reverse mappings, but that's another popular > "nslookup sucks, don't use it"-category posting to this mailing list) http://dougbarton.us/DNS/bind-users-FAQ.html#nslookup-evil -- Improve the effectiveness of your Internet presence with a domain name makeover!http://SupersetSolutions.com/ ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users