Explain output of ipconfig /displaydns
Rise to the top 3% as a developer or hire one of them at Toptal: https://topt.al/25cXVn
--------------------------------------------------
Music by Eric Matyas
https://www.soundimage.org
Track title: Ancient Construction
--
Chapters
00:00 Explain Output Of Ipconfig /Displaydns
00:17 Accepted Answer Score 17
01:33 Answer 2 Score 4
02:21 Answer 3 Score 2
03:06 Answer 4 Score 0
03:21 Thank you
--
Full question
https://superuser.com/questions/230308/e...
--
Content licensed under CC BY-SA
https://meta.stackexchange.com/help/lice...
--
Tags
#windows #networking #dns #ipconfig
#avk47
ACCEPTED ANSWER
Score 17
The fields in the output of /displaydns
correspond to the fields of an actual DNS reply.
- In a DNS server's database, each piece of data is a "resource record".
- "Record name" is the name you query DNS for, and the records (addresses or something else) belong to that name.
- "Record type" is the type, displayed as a number - although more commonly they are referred to by their names, internally (in the DNS protocol) each has a number. Type 1 is "A" for "address", an IPv4 address. (IPv6 uses type 28, "AAAA", for an address four times as long.) "PTR", type 12, is a "pointer" to a hostname - most commonly used when mapping an IP address back to its name. "CNAME" is "canonical name".
- "Time To Live" is the time in seconds after which the cache entry must expire.
- "Data Length" appears to be the length in bytes - an IPv4 address is four bytes, IPv6 is sixteen bytes. For CNAME or PTR, Windows displays a static number (either 4 or 8, depending on your system) - this is actually the size of a memory address where the actual text is kept.
- The "answer" section of a DNS reply is the actual answer to the query, and "additional" contains information that will likely be needed to find the actual answer. For example, glue records.
- "
<type>
record" shows the actual value stored.
ANSWER 2
Score 4
ipconfig /help
says that this "Displays the contents of the DNS Resolver Cache".
The DNS resolver is what turns a domain name, like superuser.com, into an IP address, 64.34.119.12 for superuser.com.
This can take a second or two, but because IP addresses change infrequently the resolver caches (aka "saves") these entries locally on your computer. This means that the next time you make a connection to superuser.com, your computer doesn't need to make an external request for the IP address and the conversion from domain name to IP address is done in milliseconds instead of seconds.
The /displaydns
option shows what is currently saved. This can be useful when a site seems not to be responding. It will be used more for technical types (and superusers) than average users.
ANSWER 3
Score 2
cached domain
----------------------------------------
Record Name . . . . . : cached name
Record Type . . . . . : Record type I don't know which records types are cached exactly
Time To Live . . . . : TTL
Data Length . . . . . : ?? A records 4, CNAME usually 8, I didn't find info about this. Maybe IPv6 records have a different one.
Section . . . . . . . : Usually "Answer", there is an "Additional" section also
A (Host) Record . . . : IPv4 address
CNAME Record . . . . : domain (will check the address of this domain instead of the domain, CNAME records can have a very long TTL so its useful to avoid unnecessary queries.
ANSWER 4
Score 0
That command displays the content of the DNS resolver cache.
If you do a job in any call center then you will see the content of DNS resolver from
IPCONFIG /DISPLAYDNS