Re: Weird Ports Showing for XINETD

From: Brett Franck (bfranck_at_perfectnetusa.com)
Date: 10/29/03

  • Next message: Richardson, Robert: "RE: vsftpd beginner's tutorial?"
    To: <redhat-list@redhat.com>
    Date: Wed, 29 Oct 2003 15:18:29 -0600
    
    

    Steve,

    Thanks for your reply, but I have a question. SGI_FAM is started through
    xinetd, yes, but the file indicates that it's a TCP protocol....my open port
    is UDP. Are you sure we're talking aobut the same animal??

    Brett

    ----- Original Message -----
    From: "Rigler, Steve" <SRigler@MarathonOil.com>
    To: <redhat-list@redhat.com>
    Sent: Wednesday, October 29, 2003 2:52 PM
    Subject: RE: Weird Ports Showing for XINETD

    > There was a thread about this a while back. The culprit
    > was sgi_fam. The general consensus seemed to be to leave
    > it running.
    >
    > -Steve
    >
    > > -----Original Message-----
    > > From: redhat-list-admin@redhat.com
    > > [mailto:redhat-list-admin@redhat.com]On Behalf Of Brett Franck
    > > Sent: Wednesday, October 29, 2003 2:18 PM
    > > To: redhat-list@redhat.com
    > > Subject: Weird Ports Showing for XINETD
    > >
    > >
    > > REPOST Without HTML junk......sry bout the HTML
    > > postings.......maybe someone
    > > has an answer to my ques?
    > >
    > >
    > >
    > >
    > >
    > >
    > > Okay since I last wrote about messing up my server with a Chroot jail,
    > > things have definately changed.
    > >
    > > I installed RH9 and put it on an IBM Netvista 866 w/384Mg Ram
    > > /proc/kcore
    > > shows 401477632 Oct 28 11:53 /proc/kcore..... Vs RH8.0 on a junker 450
    > > w/320Mg Ram
    > >
    > > All is running well but I do have one question.....maybe it
    > > was this way in
    > > RH 8.0, I never noticed, but I'm pretty sure I would have
    > > noticed an open
    > > errant port not assigned to anything.
    > >
    > > netstat -taup shows a UDP port open by XINETD (BY the way,
    > > I"m not running
    > > anything with xinetd).......I first noticed it because the
    > > CHKROOTKIT bawled
    > > out an alert when the XINETD port was running on 1008 ... now it's on
    > > 923....has been on 979.....etc.....moves when I restart
    > > Xinetd.....is this
    > > the result of running xinetd as xinetd -stayalive -pidfile
    > > /var/run/xinetd.pid
    > > thus keeping a UDP port open to support the PID?????
    > >
    > > Brett
    > >
    > >
    > >
    > > --
    > > redhat-list mailing list
    > > unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    > > https://www.redhat.com/mailman/listinfo/redhat-list
    > >
    >
    >
    > --
    > redhat-list mailing list
    > unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    > https://www.redhat.com/mailman/listinfo/redhat-list
    >

    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list
    

  • Next message: Richardson, Robert: "RE: vsftpd beginner's tutorial?"

    Relevant Pages

    • FreeBSD Ports Security Advisory FreeBSD-SA-01:47.xinetd
      ... FreeBSD only: NO ... xinetd is a replacement for inetd, ... The xinetd port is not installed by default, ... Deinstall the old package and install a new package dated after the ...
      (FreeBSD-Security)
    • Re: xinetd -> danted fails [repost]
      ... I've checked and rechecked the danted and xinetd docs and FAQs. ... > *inetd ready. ... > command line option for it, but the sites are down and the cached ... Since the port cannot be listened on by more ...
      (comp.os.linux.networking)
    • RE: udp port 624 listening?
      ... I believe xinetd ... then determines what port by the appropriate entry in /etc/services. ... Subject: udp port 624 listening? ... Portmap is stopped ...
      (RedHat)
    • Re: terminal services on FC6
      ... i have a FC6 box which has 1 GB RAM and two 1 GHz XEON Processors. ... (will install xinetd as a dependency) ... A user running nmap (or any port sniffer) against your server will cause the Xvnc server to load once for each open port. ... If you see a big CPU spike, look for allot of orphaned Xvnc processes. ...
      (Fedora)
    • RE: Weird Ports Showing for XINETD
      ... Weird Ports Showing for XINETD ... w/320Mg Ram ... errant port not assigned to anything. ... -- redhat-list mailing list unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe ...
      (RedHat)