Full Disclosure mailing list archives

Strange TCP/IP DNS traffic

From: <full-disclosure () nym hush com>
Date: Thu, 3 Jun 2004 08:49:23 -0700

Also, /etc/resolv.conf lists 127.0.0.1 as the nameserver, so 
as far as I understand such traffic should not be initiated 
by user programs.


It sounds like named is running on your computer.  Depending on your
OS, netstat -anp might show you which application initiated the requests.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

Strange TCP/IP DNS traffic Shachar Shemesh (Jun 03)
- Re: Strange TCP/IP DNS traffic Nils Ketelsen (Jun 03)
- Re: Strange TCP/IP DNS traffic Nicolas Rachinsky (Jun 03)
- RE: Strange TCP/IP DNS traffic Matthew Ploessel (Jun 03)
- Re: Strange TCP/IP DNS traffic Skip Duckwall (Jun 03)
- <Possible follow-ups>
- Strange TCP/IP DNS traffic full-disclosure (Jun 03)