Windows 10: v1903 laptop sending high number of DNS queries to LAN DNS server for the hostname of v1903...

Several days ago, I noticed an abnormally high number of DNS queries from a v1903 PC on my LAN for another v1903 PC. Both PCs have the same set of Microsoft Accounts on them, with the second PC also having a local account.

I ran netstat -anon as suggested here and got this:

Proto Local Address Foreign Address State PID

TCP v1903LaptopIPAddress:55368 v1903DesktopIPAddress:80 TIME_WAIT 0

TCP v1903LaptopIPAddress:55373 v1903DesktopIPAddress:80 TIME_WAIT 0

TCP v1903LaptopIPAddress:55380 v1903DesktopIPAddress:80 TIME_WAIT 0

TCP v1903LaptopIPAddress:55385 v1903DesktopIPAddress:80 TIME_WAIT 0

TCP v1903LaptopIPAddress:55392 v1903DesktopIPAddress:80 TIME_WAIT 0

TCP v1903LaptopIPAddress:55397 v1903DesktopIPAddress:80 TIME_WAIT 0

TCP v1903LaptopIPAddress:55404 v1903DesktopIPAddress:80 TIME_WAIT 0

TCP v1903LaptopIPAddress:55409 v1903DesktopIPAddress:80 TIME_WAIT 0

TCP v1903LaptopIPAddress:55416 v1903DesktopIPAddress:80 TIME_WAIT 0

TCP v1903LaptopIPAddress:55421 v1903DesktopIPAddress:80 TIME_WAIT 0

I then wanted to see which process was causing that, so I ran netstat -anb as recommended

here and got this:
Proto Local Address Foreign Address State

TCP v1903LaptopIPAddress:61846 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61851 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61858 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61863 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61870 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61875 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61882 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61887 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61894 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61899 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:61906 v1903DesktopIPAddress:80 TIME_WAIT

TCP v1903LaptopIPAddress:63255 52.242.211.89:443 ESTABLISHED

WpnService

[svchost.exe]

The only reliable way to stop the queries seems to be to shut the offending PC down.

Any ideas?

:)

 

faster dns?

Game services don't need to solve DNS addresses, and once your computer queries a DNS server, it won't check it again until the record is locally deleted or it times out. The only thing a local DNS server could help with is the initial connection that gets made, otherwise you're adding another DNS server to the chain of DNS servers you have to hit before you find the domain you want. Plus, once a connection is made, it doesn't matter, the IP is used, not the hostname. DNS resolves occasionally and never more than once during a single session of gaming.

It sounds like someone needs to learn how DNS and BIND works.
Good book
Good Wikipedia Article

 

DNS Servers

So far, it seems like I got it fixed. I disabled Advanced DNS Service and DNS Relay. I put in the two DNS server IPs I listed above into the internet configuration and rebooted it.

 

DNS Servers

I run a DNS server locally, so when a domain is already cached, I get it back almost instantly, otherwise it responds as fast as the first server in my list (75.75.75.75 in my case.)