On Thu, Dec 23, 2004 at 05:45:07AM +0800, npy@xxxxxxxxxxx wrote: > I notice that the kernel is sending out PTR queries for each and every > ARP requests that is on the segment. Is this normal or have I been > hacked? > > I have attached a tcpdump snapshot. You may want to try `tcpdump -n`... For the record, I sincerely doubt that the _kernel_ EVER sends a DNS query (PTR or otherwise)... John -- John W. Linville linville@xxxxxxxxxxxxx - : send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html