Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Apr 2003 15:27:41 -0700 (PDT)
From:      Philip Hallstrom <philip@adhesivemedia.com>
To:        DJ Boris <dj_boris@mail.ru>
Cc:        freebsd-questions <freebsd-questions@freebsd.org>
Subject:   Re: some service is causing DNS query and therefore dial out
Message-ID:  <20030423152619.U9680@tigger.alkinetworks.com>
In-Reply-To: <012501c309e6$23c2e890$6300a8c0@d>
References:  <012501c309e6$23c2e890$6300a8c0@d>

next in thread | previous in thread | raw e-mail | index | archive | help
Install the lsof port and then run "lsof -i"  although be sure to tell it
not to resolve ip addresses otherwise it will cause a dial out :)


this might help track it down...

-philip

On Thu, 24 Apr 2003, DJ Boris wrote:

> hi there,
>
> I am having a problem tracking down "something" that triggers a dial out on
> my
>
> FreeBSD 4.7-RELEASE FreeBSD 4.7-RELEASE #0: Wed Oct  9 15:08:34 GMT 2002
> root@builder.freebsdmall.com:/usr/obj/usr/src/sys/GENERIC  i386
>
> It is somethign trying to do a DNS query
>
> Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP:
> xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (44/72)
>
> Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP:
> xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (44/72)
>
> Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP:
> xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (39/67)
>
> Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP:
> xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (50/78)
>
> Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP:
> xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (39/67)
>
> Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP:
> xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (50/78)
>
>
> I have sendmail but I have removed the "-q" flag so I only call that from
> ppp.linkup file. how can I track down what this service is? can anyone give
> me any ideas? this server is alone on the LAN at the moment?
>
> I have a DNS server running but I have heartbeat-interval set to 0.
>
> I have spent hours looking through the logs and tracking the times but I
> don't seem to be able to identify what is causing this.
>
> can someone help me out here? what conf files do I need to give you?
>
> thanx a lot
>
> DJ Boris
>
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030423152619.U9680>