find the PID doing DNS queries?

[bene-Gk2boCrsRs1AfugRpC6u6w at public.gmane.org (Ben Eisenbraun)]

On Tue, Mar 03, 2009 at 08:37:06AM -0800, Dan Kressin wrote:
> 
> We've got several RHEL boxes doing DNS queries against our old servers,
> even though resolv.conf has been updated (long ago) to point at our new
> servers.
> 
> Is there any way to determine the PID of the process(es) that are doing
> the DNS queries?

SystemTap?

http://sourceware.org/systemtap/examples/keyword-index.html#NETWORK

-ben

--
half a man's life is devoted to what he calls improvements, yet the 
original had some quality which is lost in the process.
                                                       <e.b. white>