TCP/IP Name Resolution Order

Filed under: Networking, Tech Stuff — Written by Chrissy on Tuesday, May 30th, 2006 @ 8:52 pm

I found this gem in Addison Wesley's Inside WIndows Server 2003:

A simple way to remember the order in which TCP/IP uses these tools is the phrase "Can We Buy Large Hard Drives?" The first letters are keys for cache, WINS, Broadcast, Lmhosts, Hosts, and DNS.

Update: I just found the DNS query resolver behavior in the O'reilly book "DNS on Windows Server 2003":

1.The resolver first checks its local cache, which is systemwide (and therefore shared by all applications calling the resolver). If the desired record is not in the cache, the resolver has to send at least one query to a name server.
2. The resolver queries the first name server of the preferred network adapter and waits just one second.
3. If no answer is received, the resolver resends the query simultaneously to the first name server configured for each network adapter and waits two seconds. If the host has only one network adapter, this step is skipped.
4. If no answer is received, the resolver resends the query simultaneously to all name servers configured for all adapters and waits two seconds.
5. If no answer is received, the resolver resends the query simultaneously to all name servers configured for all adapters and waits four seconds.
6. If no answer is received, the resolver resends the query simultaneously to all name servers configured for all adapters and waits eight seconds.
7. If after all this time no name server has returned an answer, the resolver gives up and an error is returned to the application.

7 Comments   -
  • Comment by Alexander | May 31, 2006 @ 9:34 am

    I thought i depends on node type, typically assigned by DHCP or H [Hybrid] by default.

  • Comment by Chrissy | May 31, 2006 @ 6:06 pm

    Hmm, I'll look into that. I'm not very knowledgeable on TCP/IP -- this was something I read in the book "Inside Windows Server 2003." Do you know of any flowcharts that describe, in detail, name resolution? Something that would even include references to Secondary DNS/WINS servers?

  • Comment by Alexander | June 2, 2006 @ 7:50 am

    Luckily found one at http://www.extralan.co.uk/Infolinks/on-site-links/Netbios-flow-chart.htm
    I guess it self-explanatory :-)

  • Comment by SmallFriendlyKiwi | August 1, 2006 @ 3:54 pm

    This is the phrase I remember!!! Works for me!!"

    "No Way Baby - Lets Have Dinner"

    "NetBIOS name cache, WINS, Broadcast, Lmhosts, Hosts, and DNS"

  • Comment by Chrissy | August 24, 2006 @ 12:25 pm

    Alexander, thanks so much!!

  • Comment by Leigh | October 5, 2006 @ 8:37 am

    Mark Minasi's book for Windows NT 4 has flow diagrams and explanations in the rather large 200 page chapter. This was all I read for the NT4 TCP/IP exam many moons ago.

    Check out Mark's other books at...only joking:-)

Leave your comment