nslookup time out

[Deepcuts]

[SOLVED] nslookup time out

Solution: http://forums.smallnetbuilder.com/showpost.php?p=150530&postcount=8

Hello

Using RT-AC68U with firmware 376.48.1 (Merlin)
Local connection to the router using WiFi USB stick from TP-LINK, model TL-WN821N.
Using IPv4 and IPv6.
Connection is PPPoE with both IPv4 and IPv6 dynamic addresses.
PC using Windows 8.1 x64

Almost everything is working good except nslookup and plenty of "Resolving host..." 2 seconds delay in Chrome when I type in a new address.

I have been reading lots of topics about people having nslookup problems but none of the suggested fixes worked for me.

The problem

A simple nslookup:
C:\Windows\System32>nslookup
DNS request timed out.
timeout was 2 seconds.
Default Server: UnKnown
Address: 2a02:2f0a:c074:1d00:e23f:49ff:fe95:6a98

Notice the timeout?
No matter what server I setup in nslookup, nothing gets resolved.
> server 8.8.8.8
DNS request timed out.
timeout was 2 seconds.
Default Server: [8.8.8.8]
Address: 8.8.8.8

> smallnetbuilder.com
Server: [8.8.8.8]
Address: 8.8.8.8

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to [8.8.8.8] timed-out

My ipconfig /all is:
Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Qualcomm Atheros AR7015 Wireless Network Adapter
Physical Address. . . . . . . . . : F8-D1-XX-B6-XX-11
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2a02:2f0a:c074:1d00:e138:f197:807d:f199(Preferred)
Temporary IPv6 Address. . . . . . : 2a02:2f0a:c074:1d00:4924:f475:c2f3:daee(Preferred)
Link-local IPv6 Address . . . . . : fe80::e138:f197:807d:f199%4(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.15(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Wednesday, November 12, 2014 7:22:14 PM
Lease Expires . . . . . . . . . . : Thursday, November 13, 2014 7:22:18 PM
Default Gateway . . . . . . . . . : fe80::e23f:49ff:fe95:6a98%4
192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 133746961
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-F4-DD-C8-68-XX-CA-28-XX-38

DNS Servers . . . . . . . . . . . : 2a02:2f0a:c074:1d00:e23f:49ff:fe95:6a98
192.168.1.1
NetBIOS over Tcpip. . . . . . . . : Enabled


Ping works fine, with a small 1 second delay before IP to name resolution:

C:\Windows\System32>ping smallnetbuilder.com

Pinging smallnetbuilder.com [216.14.113.203] with 32 bytes of data:
Reply from 216.14.113.203: bytes=32 time=74ms TTL=52
Reply from 216.14.113.203: bytes=32 time=68ms TTL=52
Reply from 216.14.113.203: bytes=32 time=78ms TTL=52
Reply from 216.14.113.203: bytes=32 time=94ms TTL=52

Ping statistics for 216.14.113.203:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 68ms, Maximum = 94ms, Average = 78ms

Doing a trace:
C:\Windows\System32>tracert smallnetbuilder.com

Tracing route to smallnetbuilder.com [216.14.113.203]
over a maximum of 30 hops:

1 1 ms 1 ms <1 ms router.asus.com [192.168.1.1]
2 2 ms 2 ms 2 ms 10.0.0.1
3 2 ms 2 ms 2 ms 10.30.0.81
4 3 ms 2 ms 2 ms XXX
5 32 ms 31 ms 31 ms XXX
6 36 ms 38 ms 47 ms XXX
^C


Short version:
Internet works, ping works, tracert works.
nslookup does not work.
Browsing to a new web address has a small delay with "Resolving host". Subsequent tries to the same address will not have the delay.


What I tried:
Reset the router to factory defaults.
ipconfig /flushdns
ipconfig /registerdns
Disabling IPv6 on router and Windows
Setting manual DNS on router and PC (8.8.8.8 and 8.8.4.4)
Changing the binding order of IPv4 (1st) and IPv6 (2nd) in Windows
Restarting PC after each change
Disabling firewall, AV on PC
Latest updates for Windows on fresh install.


I am out of ideas.
I would not mind nslookup not working too much, but all internet related functions seem to have a small delay, more pronounced on web browsing.
Please throw some fresh ideas at me.

 

[L&LD]

Try turning all your network equipment off, including your modem.

Wait at least half an hour before plugging the modem in again.

Restart everything with the modem, waiting 5 minutes, the router, again waiting for it to fully boot up and then all your clients.

 

[Deepcuts]

Thank you for the idea L&LD.

Will try that before going to count sheep.

Nevertheless, I think I can safely exclude my router and FO converter.
I just booted up a linux live distro and lucky me, my USB stick was recognized by the OS and installed.
nslookup works instantly.
Browsing the web feels a lot snappier, without any delays.

dig

root@PartedMagic:~# dig smallnetbuilder.com

; <<>> DiG 9.9.1-P1 <<>> smallnetbuilder.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39681
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;smallnetbuilder.com. IN A

;; ANSWER SECTION:
smallnetbuilder.com. 217 IN A 216.14.113.203

;; Query time: 1 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Wed Nov 12 22:14:19 2014
;; MSG SIZE rcvd: 64


nslookup


root@PartedMagic:~# nslookup smallnetbuilder.com 192.168.1.1
Server: 192.168.1.1
Address 1: 192.168.1.1 router.asus.com

Name: smallnetbuilder.com
Address 1: 216.14.113.203

Most likely, there is something messed up with Windows 8.1 or the WiFi stick drivers.
The question is...what?

 

[RMerlin]

You have Windows set to use IPv6, with an IPv6 DNS. Chances are this DNS IP is incorrect, or very slow.

Check your IPv6 configuration.

 

[Deepcuts]

ipconfig /all shows:
DNS Servers . . . . . . . . . . . : 2a02:2f0a:c074:1d00:e23f:49ff:fe95:6a98
192.168.1.1

2a02:2f0a:c074:1d00:e23f:49ff:fe95:6a98 is the IPv6 address of my router:


C:\Windows\System32>tracert 2a02:2f0a:c074:1d00:e23f:49ff:fe95:6a98

Tracing route to RT-AC68U-6A98 [2a02:2f0a:c074:1d00:e23f:49ff:fe95:6a98]
over a maximum of 30 hops:

1 4 ms 2 ms 2 ms RT-AC68U-6A98 [2a02:2f0a:c074:1d00:e23f:49ff:fe95:6a98]

Trace complete.

Even if I configure nslookup to use an IPv4 DNS, the result is the same.

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.


Later edit:

I have disabled completely IPv6 on the router.
Also on Windows 8.1 with http://support.microsoft.com/kb/929852
The exact same problem on IPv4 only.
ipconfig does not show any IPv6 addresses.

My only idea is that somehow my USB stick drivers are not compatible with Windows 8.1.

 

[Deepcuts]

Fixed it by re-installing Windows.
Still have no clue what exactly was broken or what broke nslookup.

 

[L&LD]

Re-installing probably allowed the proper drivers to load too.

 

[Deepcuts]

Found the culprit.
Kaspersky Anti Virus 2015!
Stupid little AV was the problem.
After I re installed Windows I did not install KAV 2015 right away.
Today, I installed it and nslookup problems and browser time outs started.
Disabling KAV did not do the trick. Just remove the darn thing helped.

I keep having problems with KAV everywhere I made the mistake of purchasing a licence for it.

Word of advice: stay clear of Kaspersky.

 

[L&LD]

I've often found that AV software to be worse than any actual viruses my computers have actually had.

Running all systems with Windows Defender (MSE on Windows 7 or lower) has netted me the security I need without any hoops to jump through with any of the programs I use.

It helps that I don't go looking for malware either though, I'm sure.