Unwanted DNS query.

[Dr. Pastor]

Using Wireshark, I examined the first few packets
that WindowsXP SP2 exchange with my DSL modem.
(Kerio 2.1.5 is used.)

1. From the modem to 199.3.230.2 a
DNS Standard query A teredo.ipv6.microsoft.com is issued.
What is the purpose of that DNS query?

2. From the modem to 199.3.230.2 a
DNS Standard query A www.paypal.com is issued.
What is the purpose of that DNS query?

How one would locate the (bastard) program/process that issues
the request?
Thanks for any guidance.

 

[Michael Bednarek]

Using Wireshark, I examined the first few packets
that WindowsXP SP2 exchange with my DSL modem.
(Kerio 2.1.5 is used.)

1. From the modem to 199.3.230.2 a
DNS Standard query A teredo.ipv6.microsoft.com is issued.
What is the purpose of that DNS query?

2. From the modem to 199.3.230.2 a
DNS Standard query A www.paypal.com is issued.
What is the purpose of that DNS query?

How one would locate the (bastard) program/process that issues
the request?
Thanks for any guidance.

You firewall doesn't show that? Try: NETSTAT -b