|Hi. I am detecting many DNS packets leaving my system. I am not sure if it is semantically the same message being sent over and over again, but each message has different bytes and the same length (43 bytes on the UDP payload). The traffic is about 2.3 KB/s, but started out at first as under 1 KB/s.|
They are being sent to my ISP's nameserver, largely from my computer, but also a bit from theirs, and 100% always using UDP, not TCP.
About 20 packets per second are being sent. These long streams of packets usually start out with one 300-byte packet coming from the nameserver.
I just got my internet connected recently. Due to various reasons, I often have my internet service stopped every three or four months. But this is the first time that I have detected so many DNS packets.
A thing I should mention is that, to try and remedy this problem, I ran my own DNS server that refered my IP address to my hostname, and added my host to the list of nameservers my DHCP client uses, under the hypothesis that my DHCP client wanted to know what my hostname was but my ISP's nameservers wouldn't tell it; indeed, my computer isn't associated with any hostnames, and we usually get one like X3243243.wa.isp.com. Interestingly, this actually worked. The only thing is, after 2 days of having it like this, the situation has come back again, and even more DNS packets are being sent; these packets are the same as what were being sent before.
Any help would be appreciated. Thanks.