[plug] wierd DNS activity

[W.Kenworthy]

I am having problems finding which application on a box is making
continuous DNS queries - it appears to be trying to contact the root
servers and others once or so a second and is getting blocked by the
networks firewall).  The box has its own bind which is working ok, but
the queries continue with bind shut down and most apps stopped.
resolv.conf is pointing to localhost so I would expect almost everything
to fail.  netstat is no use for this :(

BillK