Equivalent to dscacheutil -cachedump -entries on ML ?

Discussion in 'OS X Mountain Lion (10.8)' started by V4705, Nov 19, 2012.

  1. V4705 macrumors 6502

    Mar 23, 2009
    I'm looking for a command to show me all the dns cashe right now on my local machine,
    As far as I understand, "dscacheutil -cachedump -entries" used to do that on previous versions but not on ML...

    Is there any way to get the same info ?

  2. satcomer macrumors 603


    Feb 19, 2008
    The Finger Lakes Region
  3. V4705 thread starter macrumors 6502

    Mar 23, 2009
    I'm not trying to flush the cache but to print a dump (show all the current records).

    When trying to run "sudo dscacheutil -cachedump -entries" I get an error "Unable to get details from the cache node".
    Google helped me to find this article that explains "... Apple has changed the method for caching DNS queries, which unlinks it from the "dscacheutil" command...".

    Thanks :)
  4. V4705 thread starter macrumors 6502

    Mar 23, 2009
    Ok so apparently that wasn't the place the pointer is hosted,
    sudo killall -INFO mDNSResponder
    dump the cache records to /var/log/system.log, but the record I'm looking for isn't there.

    The issue is, only one computer in my network resolve an address (subdomain.mydomain.com) to a specific IP address that I'm not familiar with and looks like it might be phishing or some other scam\worm.

    mdnsresponder didn't show this record, and /etc/hosts looks clean.

    do you have any other suggestions where to look?

    is there any command I can use to resolve an address to IP (like "ping") but to also show me where this record is hosted ("who" translate the address) ?

    Many thanks!
  5. rhoydotp macrumors 6502


    Sep 28, 2006
    interesting issue ... maybe look into getent or dscl
  6. V4705 thread starter macrumors 6502

    Mar 23, 2009
    thanks for the advice :)
    unfortunately, man dscl didn't show me anything similar to what I'm trying to do
    getent command not found on ML

    any other suggestions?
    just a reminder - what i'm trying to do is to understand which table holds the dns record (or any record that translate specific subdomain to an IP address on my computer).

Share This Page