Yup, that's right. How dumb of me ... ;) Thanks! On Wed, 22 Dec 2004, John W. Linville wrote: > On Thu, Dec 23, 2004 at 05:45:07AM +0800, npy@xxxxxxxxxxx wrote: > > > I notice that the kernel is sending out PTR queries for each and every > > ARP requests that is on the segment. Is this normal or have I been > > hacked? > > > > I have attached a tcpdump snapshot. > > You may want to try `tcpdump -n`... > > For the record, I sincerely doubt that the _kernel_ EVER sends a DNS > query (PTR or otherwise)... > > John > - : send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html