Ok sorry guys, i think i've found just after sending the email... i forgot to tell you i installed iptraf also and /dev/rvndiptcomsk seems to be used by rvnamed which is used by iptraf to do reverse DNS lookup without blocking
if that was written somewhere in the documentation of iptraf.... sorry Patrick
