From owner-freebsd-questions@FreeBSD.ORG Wed Apr 23 15:27:43 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2AF4C37B401 for ; Wed, 23 Apr 2003 15:27:43 -0700 (PDT) Received: from tigger.alkinetworks.com (tigger.alkinetworks.com [216.211.130.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5F7AE43F75 for ; Wed, 23 Apr 2003 15:27:42 -0700 (PDT) (envelope-from philip@adhesivemedia.com) Received: from tigger.alkinetworks.com (tigger.alkinetworks.com [216.211.130.10])h3NMRfDG010954; Wed, 23 Apr 2003 15:27:41 -0700 (PDT) (envelope-from philip@adhesivemedia.com) Received: from localhost (philip@localhost)h3NMRfWY010951; Wed, 23 Apr 2003 15:27:41 -0700 (PDT) X-Authentication-Warning: tigger.alkinetworks.com: philip owned process doing -bs Date: Wed, 23 Apr 2003 15:27:41 -0700 (PDT) From: Philip Hallstrom X-X-Sender: philip@tigger.alkinetworks.com To: DJ Boris In-Reply-To: <012501c309e6$23c2e890$6300a8c0@d> Message-ID: <20030423152619.U9680@tigger.alkinetworks.com> References: <012501c309e6$23c2e890$6300a8c0@d> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-questions Subject: Re: some service is causing DNS query and therefore dial out X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Apr 2003 22:27:43 -0000 Install the lsof port and then run "lsof -i" although be sure to tell it not to resolve ip addresses otherwise it will cause a dial out :) this might help track it down... -philip On Thu, 24 Apr 2003, DJ Boris wrote: > hi there, > > I am having a problem tracking down "something" that triggers a dial out on > my > > FreeBSD 4.7-RELEASE FreeBSD 4.7-RELEASE #0: Wed Oct 9 15:08:34 GMT 2002 > root@builder.freebsdmall.com:/usr/obj/usr/src/sys/GENERIC i386 > > It is somethign trying to do a DNS query > > Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: > xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (44/72) > > Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: > xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (44/72) > > Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: > xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (39/67) > > Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: > xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (50/78) > > Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: > xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (39/67) > > Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: > xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (50/78) > > > I have sendmail but I have removed the "-q" flag so I only call that from > ppp.linkup file. how can I track down what this service is? can anyone give > me any ideas? this server is alone on the LAN at the moment? > > I have a DNS server running but I have heartbeat-interval set to 0. > > I have spent hours looking through the logs and tracking the times but I > don't seem to be able to identify what is causing this. > > can someone help me out here? what conf files do I need to give you? > > thanx a lot > > DJ Boris > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" >