The other day I installed WireShark 1.6.3 to see what's going on on my network more especially concerning DNS Traffic.
So I filtered DNS traffic and I saw DNS questions asked on my local DNS Server (BIND).
What I would like to know is: is it possible to see WHAT application asks DNS questions? (apparently it is not only the system, browser and mail that asks DNS questions).
thank you in advance.
Hello,
Can you give a little more background info on this? Why do you want to do it?
If you wanted to know what websites people where going on then the easiest thing to do would be to filter out the html packets and look at the GET commands.
Dave
Why I want to do this: I just like to know what application make contact with the Internet in the background (pure out of curiosity).
e.g.: I have a little nifty free program (fastcommand) running in the backgroud in which I can type at commands at any time. Works great.
I can also see that that program regularly makes contact with the Internet (probably to check for updates). I know that this is the program fastcommand because I recognize the sitename.
But there are othter DNS queries to the Internet that I don't recognize: my question is now: how can I know WHICH PROGRAM tries to make contact with the Internet.
I know it is not a problem; it's pure out of curiosity.
Do you have a server or just a PC?
The easiest way to check to see what program is connecting to the internet would be to open cmd and use netstat -b. This shows the connections made by applications.
This software looks useful:
How to check which application or software is using Internet connection
I havent used it though.
Dave
thank you.
very small and useful program.
No problem, glad I could help :)
Dave
Quote