> Also, /etc/resolv.conf lists 127.0.0.1 as the nameserver, so > as far as I understand such traffic should not be initiated > by user programs. It sounds like named is running on your computer. Depending on your OS, netstat -anp might show you which application initiated the requests.