Re: Name resolution Hacked

From: Pete Elliott [MSFT] (peterell@online.microsoft.com)
Date: 04/11/03 

From: "Pete Elliott [MSFT]" <peterell@online.microsoft.com>
Date: Thu, 10 Apr 2003 17:17:38 -0700

Windows not only uses the hosts file for name resolution, but also lmhosts.
Check to see if there is an entry in that file. 

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Steven L Umbach" <sumbach@ameritech.net> wrote in message
news:PCkla.353$ug7.158397@newssrv26.news.prodigy.com...
>        How are you sure that it is a host lookup?? It could be resolving a
> netbios name possibly appending a dns suffix or working off of the dns
> client cache. Couple ways to check. Next time you try it run ipconfig
> /flushdns first. If it resolves use ipconfig /displaydns to see if it is
> resolved there. If not check nbtstat -r, -n, -c for the name being
resolved
> via NBT. Or better yet capture the lookup by starting netmon just before
you
> do the name resolution request.  --- Steve
>
> "cvazquez" <cvazquez@epi.com.mx> wrote in message
> news:025a01c2ff96$e95fc460$a101280a@phx.gbl...
> > I have a windows 2k server that resolves a name to IP
> > statictly with out sending a DNS lookup. I check the hosts
> > file and the entry is not there, where else can this be?
>
>