[Unbound-users] sendto failed: Operation not permitted at 3am?

Phil Mayers p.mayers at imperial.ac.uk
Wed Jul 16 08:51:19 UTC 2014

On 15/07/14 17:29, donotreply at projectumbra.com wrote:

> What is quite odd is:
> This happens everyday at 3AM local time
> It happens with 5 IP addresses
> The 5 ips all belong to Dell.

I wonder if this is being triggered as a result of an ICMP error, in 
response to a DNS query. Maybe the DNS query happens at 3am (automated 
job?) which explains the timing.

Maybe try running a tcpdump ring-buffer capture and look at the traffic 
for that time period.

More information about the Unbound-users mailing list