Is this considered normal for Ubuntu 14.04 ?
netstat -tulpn
shows that both bind9 (named) and dnsmasq serve on port 53:
Active Internet connections (only servers) Proto Recv-Q Send-Q Local
Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 4041/named
tcp 0 0 127.0.1.1:53 0.0.0.0:* LISTEN 3653/dnsmasq
Also with UDP:
udp 0 0 127.0.0.1:53 0.0.0.0:* 4041/named
udp 0 0 127.0.1.1:53 0.0.0.0:* 3653/dnsmasq
Notice that only dnsmasq listens outside localhost, over port 67:
udp 0 0 0.0.0.0:67 0.0.0.0:* 2158/dnsmasq
Other functions this server performs are primary DNS zones for a dev team's private domain, routing, NAT and transparent proxy(squid3 & iptables) with DHCP server.
They are bound at different addresses.
named
is listening on127.0.0.1
whilednsmasq
is listening on127.0.1.1
. They probably resolve to different virtual network devices