Home / server / Questions / 638034
In Process
Simon
Asked: 2014-10-19 11:18:17 +0800 CST

Different DNS lookup results for dig, nslookup, telnet and curl

  • 772

I'm having a weird disagreement between a bunch of tools on my Debian 7 box about the IP adress a certain domain name should resolve to:

$ dig www.ip-camera-beveiliging.com
[...]
;; ANSWER SECTION:
www.ip-camera-beveiliging.com. 60 IN    A   85.17.33.164

$ nslookup www.ip-camera-beveiliging.com
[...]
Non-authoritative answer:
Name:   www.ip-camera-beveiliging.com
Address: 85.17.33.164

$ telnet www.ip-camera-beveiliging.com 80
Trying 50.57.203.17...
Connected to www.ip-camera-beveiliging.com.

$ curl -v http://www.ip-camera-beveiliging.com/
* About to connect() to www.ip-camera-beveiliging.com port 80 (#0)
*   Trying 50.57.203.17...

The first two results are what I expect, the second two results give me some sleazy ad page. I would love to understand how this happens.

edit: I ran apt-get upgrade an hour ago, and nscd was among the upgraded packages. I restartet nscd and the problem went away. Thank you Michael for the suggestion!

domain-name-system

1 Answers

  1. Hmm... nscd is the Name service caching daemon. The inconsistency you see in results was likely caused by stale/cached lookups.

    Are you sure you need to be running nscd? If you don't use it, your lookups will with your DNS servers and I think you'll get better results. Consider turning nscd off if you don't have a reason to have it enabled.

    • 1