On a windows 7 client, when I ping a LAN host MYSTERY, it gives me the correct IP. However, when I do nslookup MYSTERY, it says non-existent domain. I checked both the DNS listed in ipconfig and find that the hostname MYSTERY is indeed not listed. The DHCP server also does not have the entry. The same behaviour occurs after I do ipconfig /flushdns. There in no entry in the local windows host file as well.
How can I find out where the client is getting the resolved IP?
Note: MYSTERY is a Synology Rackstation configured to join the network domain.
GetAddrInfoEx
function in Windows 7/8 could indicate what namespace provider is resolving a hostname. However, I don't actually know of any tool that uses this call and identifies the providers of any results. msdn.microsoft.com/en-us/library/windows/desktop/…