real quick while I have a moment, you can also use tcpdump -vvn port 53 to see dns queries another option is to strace the sshd and forks, strace -p <pidof-sshd> -vv -e <expression>. I don't recall what expression would be best, connect comes to mind.
Good luck. Scott /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
