How to Use NsLookup Commands in Windows and Linux

Network troubleshooting and information gathering can often be a complex task. One of the most essential tools for these purposes is nslookup. This command-line utility is used to query Domain Name Systems (DNS) to obtain domain name or IP address mapping as well as other DNS records. In both Windows and Linux environments, nslookup is a powerful tool for network diagnostics and verification tasks.

Below, we’ll explore how to use nslookup commands across both Windows and Linux systems, including basic usage and some advanced functions.

What Is NsLookup Command?

NsLookup stands for ‘name server lookup’ and is a built-in utility within Windows and Unix-like operating systems such as Linux. It queries DNS servers to obtain the domain name or IP address associated with a particular host or domain.

Basic NsLookup Command in Windows and Linux

The most common use of nslookup is to find the IP address associated with a domain name. First, we will discuss two modes used in nslookup command:

1. Non-Interactive Mode: Type nslookup domain_name replace with the actual domain name Press Enter. Nslookup will display the IP address and the DNS server used for the lookup.
2. Interactive Mode: Type nslookup and press Enter. At the prompt type set querytype=a to query for A records, which map domain names to IPv4 addresses. Type the domain name and press Enter. Nslookup will return the IP address.

By default, nslookup displays responses from a non-authoritative source. This means the information might be cached by your local DNS server and not directly from the domain’s authoritative name servers. Both Windows and Linux allow for one-off commands without entering into nslookup interactive mode. Here is how you can use nslookup command in Windows and Linux:

For Windows

For nslookup Windows, open the Command Prompt by pressing Windows Key + R, and typing “cmd” or you can access the Command Prompt by typing cmd in the Start menu search bar and then pressing Enter.

Once the Command Prompt opens type nslookup and press Enter. You will see a “>” prompt, indicating nslookup mode. Simply type a domain name to get its corresponding IP address(es). For example:

> example.com

It displays the IP address as given picture below:

Type exit to leave nslookup mode.

For Linux

For nslookup Linux, open your Terminal application from the applications menu or by using a shortcut, typically Ctrl+Alt+T. Similar to Windows, type nslookup and hit Enter.

At the prompt, entering a domain name will return its IP address(es). For instance:

google.com

It displays the IP address in the Linux terminal as given picture below:

To exit nslookup mode type exit or use Ctrl+D.

Advanced NsLookup Commands options

Nslookup offers a variety of flags and options to specialize your queries. Here are some commonly used ones:

Query Specific DNS Records

You can query specific types of DNS records by adding the record type to your command. For example, to find the Mail Exchange (MX) records for a domain which are crucial for email delivery you can use:

nslookup -type=mx gmail.com

Set a Different DNS Server

By default, nslookup uses the DNS server configured on your system. To use a different server for your query:

> server 8.8.8.8
> example.com

Here “8.8.8.8” is the DNS server of Google which we are setting for our current session.

Reverse DNS Lookup:

If you have the IP address and need to find out the associated hostname:

> set type=ptr
> 8.8.8.8

This performs a reverse lookup on the IP address to find the related domain name. You can find a comprehensive list of nslookup options by typing nslookup help or nslookup ? in your terminal.

Effective Use for NsLookup

Nslookup is a valuable tool for troubleshooting DNS-related problems. Here are some effective use for nslookup examples:

• Ensure your firewall settings allow outbound DNS queries.
• If output seems incorrect, double-check the spelling of domain names; typos can lead to unexpected results.
• Some domains may have multiple entries like several mail servers so expect more than one result at times.
• Queries might fail if there is a problem with either your local network settings or the DNS server itself.

Conclusion

Understanding how to effectively use nslookup can significantly useful in diagnosing network issues and ensuring proper DNS configurations. Its ability to look up various types of DNS records makes it versatile for many different scenarios in both Windows and Linux environments. It is important to respect privacy and legal boundaries during network diagnostics and troubleshooting activities.

FAQ