[Novalug] Finding PID That Is Querying DNS

[Kevin Dwyer]

On Wed, Oct 03, 2007 at 12:43:46AM -0500, Bernie Hoefer wrote:
> ===
> 
>      For connections that are established and active, I'd normally use
> netstat to see the process ID (PID).  However, that didn't work.  It
> shows the connection, but doesn't list the PID.
> 
> ===
> > workstation:~ # netstat -npcuve
> > Active Internet connections (w/o servers)
> > Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      PID/Program name
> > udp        0      0 192.168.1.2:2038        192.168.1.1:53          ESTABLISHED 0          1993246    -

Try running it as root.  You need superuser privileges to see this
information on sockets you don't own.

-kpd