[Unbound-users] sendto failed: Operation not permitted at 3am?
p.mayers at imperial.ac.uk
Wed Jul 16 08:51:19 UTC 2014
On 15/07/14 17:29, donotreply at projectumbra.com wrote:
> What is quite odd is:
> This happens everyday at 3AM local time
> It happens with 5 IP addresses
> The 5 ips all belong to Dell.
I wonder if this is being triggered as a result of an ICMP error, in
response to a DNS query. Maybe the DNS query happens at 3am (automated
job?) which explains the timing.
Maybe try running a tcpdump ring-buffer capture and look at the traffic
for that time period.
More information about the Unbound-users