Problem with name resolution

[zaxxon]

Hi,

got an AIX 4.3.3 box, asking it's DNS-server about every 3-4 seconds for the name loopback.bla.org. The DNS returns a NXDomain, what is totally ok. The loopback is in the /etc/hosts and the order for namelookup is (/etc/netsvc.conf):
hosts=local,bind

That should prevent asking the DNS-server for that name. The hosts contains

127.0.0.1 localhost loopback loopback.bla.org

which is correct in my eyes too. It seems for me, that there is running some application, that doesn't use gethostbyname(), but how can i track it?

netstat and lsof won't show the DNS-requests' process, because it's so fast and short, i can't catch it by repeating the comannds very fast.

Anyone got an idea, how to find the application that is doing this DNS-request? I have not the option on this server to stop one application after another to see, which one is responsible.

Help is very welcome.

 

[mrn]

Try qualifying the name add a . to the end of your

127.0.0.1 localhost loopback loopback.bla.org. --
| Mike Nixon
| Unix Admin
|

http://www.instantflashshop.com

----------------------------

 

[zaxxon]

Hi,

added the dot, no change - tcpdump still shows a NXDomain from the DNS-server.

 

[sectorseveng]

Possibly it's ipv6 related, you could try changing the /etc/netsvc.conf to be:
hosts=local4,bind4

Also you could check to see if any of the users are using the NSORDER environment variable as that overrides the /etc/netsvc.conf. Check the users shell configuration files for this being set, also you can use 'ps eww' to see the environments for currently running processes.

Also if the application is using the nslookup command it might be possible to rename the command to something else and see what squawks.

 

[Morsing]

What is the domain name of the host itself??
Why is it asking for loopback.bla.org??

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support