Skip to content

Exclude DNS over TLS from unexepcted talkers #489

Description

@Crunchy000

remote port 853 is expected from systemd-resolved where using DNS over TLS.

{"name":"pack_detection_1-unexpected-talkers-linux","hostIdentifier":"fedora","calendarTime":"Mon Jun 30 21:33:54 2025 UTC","unixTime":1751319234,"epoch":0,"counter":2,"numerics":false,"columns":{"cgroup_path":"/system.slice/systemd-resolved.service","child_cmd":"/usr/lib/systemd/systemd-resolved","cwd":"/","euid":"990","exception_key":"853,6,500,systemd-resolved,0u,0g,systemd-resolve","local_address":"192.168.86.69","local_port":"54556","name":"systemd-resolve","parent_cmd":"/usr/lib/systemd/systemd --switched-root --system --deserialize=49 rhgb","parent_path":"/usr/lib/systemd/systemd","parent_pid":"1","path":"/usr/lib/systemd/systemd-resolved","remote_address":"1.1.1.1","remote_port":"853","sha256":"cbd9c5369244db02ebb20200e57a8455cfc07d5ff966da9fed6811b57ed02561","state":"ESTABLISHED"},"action":"removed"}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions