I’m on OS 15.6, KDE/plasma.
observing the DNS requests in pi-hole I notice that long after closing firefox there are still DNS request to the URLs that I had accessed. Occasionally even URLs from bookmarks that I had not visited for ages.
Any hint how to find out which program is accessing these URLs? Maybe via reading the bookmark file.
Probably good to start with nethogs (you might need to install it), start it as root and you see which programs do network access.
If that does not give the answer, please see:
And please let us know what you tried and what is working/not working.
very interesting article.
Due to my limited expertise I tried some via copy/paste, but I couldn’t identify any process causing the dns requests.
auditctl -a exit,always -F arch=b64 -F a0=2 -F a1\&=2 -S socket -k SOCKET
delivered some nscd requests, but they didn’t really match with the pihole logging.
the dns2proc script deliverd some ‘…No audit log found for DNS query: …’, i.e no process is identified
auditctl -a exit,always -F arch=b64 -F a0=2 -F a1=2050 -S socket -k SOCKET
didn’t catch dns requests shown by pihole
I wonder if you are just seeing pihole caching old DNS requests - they do expire and have to be refreshed.
That would explain why pihole is faster in DNS lookups.
Try and see if nscd is running:
systemctl status nscd.service
Disable it and see if you still get the DNS requests.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.