Dimension connecting to archive.ubuntu.com?
I discovered today that our Dimension server made numerous connections to archive.ubuntu.com that appear to be package requests (e.g. GET /ubuntu/dists/precise/main/source/Sources.gz HTTP/1.1; User-Agent: Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10) ). The response from the server for each request are 404 errors. It's possible that this has been taking place all along, it's just that I discovered it today with a new IDS we're testing out.
Is this normal behavior for the Dimension server, does it try to update its packages from ubuntu.com?