Router fires each some minutes doubled DNS requests

Hi,

some system in my network - not yet located - fires each some
minutes DNS requests, which then are forward to the default router
and thus the internet.

- Appears once 2 minutes latern, the 5 minutes later, in general
every 2-5 minutes later.
- Each time, 2 requests are fired. The requests go to the
primary and the secondary DNS server in parallel.

Does someone know a reason for that? Probably a M$ problem :-( ?

Ports 137-139 are blocked on the router.

____
Cheers

Stefan Pantke

Don't forget: The truth is somewhere...

["Followup-To:" header set to comp.os.linux.networking.]
Stefan Pantke :: WEB.DE <(E-Mail Removed)> wrote:
> Hi,
>
> some system in my network - not yet located - fires each some
> minutes DNS requests, which then are forward to the default router
> and thus the internet.
>
> - Appears once 2 minutes latern, the 5 minutes later, in general
> every 2-5 minutes later.
> - Each time, 2 requests are fired. The requests go to the
> primary and the secondary DNS server in parallel.
>
> Does someone know a reason for that? Probably a M$ problem :-( ?

It could be almost anything. You need to indentify the machine
responsible and have a look at it.

--
Bruce

I must admit that the existence of Disneyland (which I know is real)
proves that we are not living in Judea in AD 50. -- Philip K. Dick

Hi Stefan,

i don't think it's a M$-Problem. Maybe it's only the tool you use to
determine the traffic on your network, e.g. iptraf or whatever u use.
Such software tries to resolve all incomming requests on your network
card by using the dns, which leads to two UDP/IP connections between
your computer and the dns. It's such as simple that every time you see
an incomming connection request as a resolved name there have been a dns
resolution before initiated by a dns-service running on your
computer/server.
How often your server is "fireing" depends therefor on how ofter some on
else wants to connect to your server. If you get a ip number by dhcp
from your isp and this number have been used by a p2p-server before you
might get more than 10 request the second.....

Cioa Klaus