How to find the process that initiated the dns query?

I tried to use netatat, but udp is not displayed here.
I tried to use tcpdump, but udp uses a random port.
Can anyone provide some help? thanks.

anyone help me ?

Thank you for your reply, but the dns port is not fixed, so you cannot use netstat to query. I have solved this problem now.

Which application is not using fixed dns port?

It would help to explain here how.

The destination port, isn't the port where your DNS is configured to listen?

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.