Hot answers tagged

1

Use iptables to help you narrow it down, by logging the user ID of outgoing DNS queries. iptables -I OUTPUT -m tcp -p tcp --dport 53 -m state --state NEW -j LOG --log-prefix "DNS traffic: " --log-uid iptables -I OUTPUT -m udp -p udp --dport 53 -m state --state NEW -j LOG --log-prefix "DNS traffic: " --log-uid This is the best you can do with iptables, but ...



Only top voted, non community-wiki answers of a minimum length are eligible