Home / ubuntu / Questions / 223217
In Process
Matt Y.
Asked: 2012-11-29 14:36:20 +0800 CST

How can I monitor/check outgoing DNS lookup connections?

  • 772

When using the various CLI network monitors like LSOF, Netstat, ifTop. I'd like to see what applications are doing DNS lookups (using port 53 over UDP). How do I configure so that these connections are shown in the Terminal? I'd like to see what IP Address is being connected to and what applications are requesting the DNS lookup.

I'm interested in any way to learn this information.

internet-connection

1 Answers

  1. You must turn on bind / named logging:

    $ sudo apt-get install bind9utils
$ rndc querylog

    Then, you can see the log the service in the system log:

    $ tail -f /var/log/messages

    Once finished, you can turn off logging again:

    $ rndc querylog
    • 3