Re: ARG: Xinetd is listening on port tcp:514????@

From: Keg (redhat_at_zulu420.com)
Date: 05/22/04

  • Next message: Jason Staudenmayer: "RE: ARG: Xinetd is listening on port tcp:514????@"
    Date: Sat, 22 May 2004 08:53:08 -0700
    To: General Red Hat Linux discussion list <redhat-list@redhat.com>
    
    

    Please disregard the last post, I still had syslog running in the screen
    output, but here I shut it down and you can see that when syslogd is NOT
    running and xinetd is NOT running, the only bound sockets are as follows:

    syslog:/etc/xinetd.d #netstat -apn | grep LIST
    tcp 0 0 0.0.0.0:32768 0.0.0.0:*
    LISTEN 1506/rpc.statd
    tcp 0 0 0.0.0.0:22 0.0.0.0:*
    LISTEN 1583/sshd
    unix 2 [ ACC ] STREAM LISTENING 1902
    1618/gpm /dev/gpmctl
    unix 2 [ ACC ] STREAM LISTENING 3576
    2169/xfs /tmp/.font-unix/fs7100
    unix 2 [ ACC ] STREAM LISTENING 16909
    9236/sshd /tmp/ssh-XXqFMQ1t/agent.9236
    syslog:/etc/xinetd.d #ps -ef
    UID PID PPID C STIME TTY TIME CMD
    root 1 0 0 May19 ? 00:00:05 init
    root 2 0 0 May19 ? 00:00:00 [migration/0]
    root 3 0 0 May19 ? 00:00:00 [migration/1]
    root 4 1 0 May19 ? 00:00:00 [keventd]
    root 5 1 0 May19 ? 00:00:02 [ksoftirqd_CPU0]
    root 6 1 0 May19 ? 00:00:00 [ksoftirqd_CPU1]
    root 11 1 0 May19 ? 00:00:00 [bdflush]
    root 7 1 0 May19 ? 00:00:00 [kswapd]
    root 8 1 0 May19 ? 00:00:00 [kscand/DMA]
    root 9 1 0 May19 ? 00:03:18 [kscand/Normal]
    root 10 1 0 May19 ? 00:01:31 [kscand/HighMem]
    root 12 1 0 May19 ? 00:00:01 [kupdated]
    root 13 1 0 May19 ? 00:00:00 [mdrecoveryd]
    root 21 1 0 May19 ? 00:00:01 [kjournald]
    root 79 1 0 May19 ? 00:00:00 [khubd]
    root 1143 1 0 May19 ? 00:00:00 [kjournald]
    root 1155 1 0 May19 ? 00:00:00 [kjournald]
    root 1165 1 0 May19 ? 00:00:00 [kjournald]
    root 1470 1 0 May19 ? 00:00:11 irqbalance
    rpcuser 1506 1 0 May19 ? 00:00:00 rpc.statd
    root 1567 1 0 May19 ? 00:00:00 [rpciod]
    root 1568 1 0 May19 ? 00:00:00 [lockd]
    root 1583 1 0 May19 ? 00:00:00 /usr/sbin/sshd
    root 1618 1 0 May19 ? 00:00:01 gpm -t ps/2 -m /dev/mouse
    root 1627 1 0 May19 ? 00:00:00 crond
    xfs 2169 1 0 May19 ? 00:00:00 xfs -droppriv -daemon
    daemon 2187 1 0 May19 ? 00:00:00 /usr/sbin/atd
    root 2198 1 0 May19 tty1 00:00:00 /sbin/mingetty tty1
    root 2199 1 0 May19 tty2 00:00:00 /sbin/mingetty tty2
    root 2200 1 0 May19 tty3 00:00:00 /sbin/mingetty tty3
    root 2201 1 0 May19 tty4 00:00:00 /sbin/mingetty tty4
    root 2202 1 0 May19 tty5 00:00:00 /sbin/mingetty tty5
    root 2203 1 0 May19 tty6 00:00:00 /sbin/mingetty tty6
    root 9236 1583 0 08:13 ? 00:00:00 /usr/sbin/sshd
    root 9238 9236 0 08:13 pts/0 00:00:00 -bash
    root 9431 9238 0 08:24 pts/0 00:00:00 ps -ef

    When I start xinetd and ONLY xinetd:

    syslog:/etc/xinetd.d #/etc/init.d/xinetd start
    Starting xinetd: [ OK ]
    syslog:/etc/xinetd.d #netstat -apn | grep LIST
    tcp 0 0 0.0.0.0:512 0.0.0.0:*
    LISTEN 9442/xinetd
    tcp 0 0 0.0.0.0:32768 0.0.0.0:*
    LISTEN 1506/rpc.statd
    tcp 0 0 0.0.0.0:513 0.0.0.0:*
    LISTEN 9442/xinetd
    tcp 0 0 0.0.0.0:514 0.0.0.0:*
    LISTEN 9442/xinetd
    tcp 0 0 0.0.0.0:5666 0.0.0.0:*
    LISTEN 9442/xinetd
    tcp 0 0 0.0.0.0:873 0.0.0.0:*
    LISTEN 9442/xinetd
    tcp 0 0 0.0.0.0:13782 0.0.0.0:*
    LISTEN 9442/xinetd
    tcp 0 0 0.0.0.0:22 0.0.0.0:*
    LISTEN 1583/sshd
    tcp 0 0 0.0.0.0:13783 0.0.0.0:*
    LISTEN 9442/xinetd
    tcp 0 0 0.0.0.0:23 0.0.0.0:*
    LISTEN 9442/xinetd
    tcp 0 0 0.0.0.0:13722 0.0.0.0:*
    LISTEN 9442/xinetd
    tcp 0 0 0.0.0.0:13724 0.0.0.0:*
    LISTEN 9442/xinetd
    unix 2 [ ACC ] STREAM LISTENING 1902
    1618/gpm /dev/gpmctl
    unix 2 [ ACC ] STREAM LISTENING 26644
    9446/minilogd /dev/log
    unix 2 [ ACC ] STREAM LISTENING 3576
    2169/xfs /tmp/.font-unix/fs7100
    unix 2 [ ACC ] STREAM LISTENING 16909
    9236/sshd /tmp/ssh-XXqFMQ1t/agent.9236

    syslog:/etc/xinetd.d #ps -ef
    UID PID PPID C STIME TTY TIME CMD
    root 1 0 0 May19 ? 00:00:05 init
    root 2 0 0 May19 ? 00:00:00 [migration/0]
    root 3 0 0 May19 ? 00:00:00 [migration/1]
    root 4 1 0 May19 ? 00:00:00 [keventd]
    root 5 1 0 May19 ? 00:00:02 [ksoftirqd_CPU0]
    root 6 1 0 May19 ? 00:00:00 [ksoftirqd_CPU1]
    root 11 1 0 May19 ? 00:00:00 [bdflush]
    root 7 1 0 May19 ? 00:00:00 [kswapd]
    root 8 1 0 May19 ? 00:00:00 [kscand/DMA]
    root 9 1 0 May19 ? 00:03:19 [kscand/Normal]
    root 10 1 0 May19 ? 00:01:31 [kscand/HighMem]
    root 12 1 0 May19 ? 00:00:01 [kupdated]
    root 13 1 0 May19 ? 00:00:00 [mdrecoveryd]
    root 21 1 0 May19 ? 00:00:01 [kjournald]
    root 79 1 0 May19 ? 00:00:00 [khubd]
    root 1143 1 0 May19 ? 00:00:00 [kjournald]
    root 1155 1 0 May19 ? 00:00:00 [kjournald]
    root 1165 1 0 May19 ? 00:00:00 [kjournald]
    root 1470 1 0 May19 ? 00:00:11 irqbalance
    rpcuser 1506 1 0 May19 ? 00:00:00 rpc.statd
    root 1567 1 0 May19 ? 00:00:00 [rpciod]
    root 1568 1 0 May19 ? 00:00:00 [lockd]
    root 1583 1 0 May19 ? 00:00:00 /usr/sbin/sshd
    root 1618 1 0 May19 ? 00:00:01 gpm -t ps/2 -m /dev/mouse
    root 1627 1 0 May19 ? 00:00:00 crond
    xfs 2169 1 0 May19 ? 00:00:00 xfs -droppriv -daemon
    daemon 2187 1 0 May19 ? 00:00:00 /usr/sbin/atd
    root 2198 1 0 May19 tty1 00:00:00 /sbin/mingetty tty1
    root 2199 1 0 May19 tty2 00:00:00 /sbin/mingetty tty2
    root 2200 1 0 May19 tty3 00:00:00 /sbin/mingetty tty3
    root 2201 1 0 May19 tty4 00:00:00 /sbin/mingetty tty4
    root 2202 1 0 May19 tty5 00:00:00 /sbin/mingetty tty5
    root 2203 1 0 May19 tty6 00:00:00 /sbin/mingetty tty6
    root 9236 1583 0 08:13 ? 00:00:00 /usr/sbin/sshd
    root 9238 9236 0 08:13 pts/0 00:00:00 -bash
    root 9442 1 0 08:25 ? 00:00:00 xinetd -stayalive
    -pidfile /var/run/xinetd.pid
    root 9446 1 0 08:25 ? 00:00:00 minilogd
    root 9452 9238 0 08:25 pts/0 00:00:00 ps -ef

    So something in xinetd is creating this socket on port 514. Here are the
    only services enabled in xinetd:
    bpcd: disable = no
    bpjava-msvc: disable = no
    nrpe: disable = no
    vnetd: disable = no
    vopied: disable = no
    nrpe: disable = no
    rexec: disable = no
    rlogin: disable = no
    rsh: disable = no
    rsync: disable = no
    telnet: disable = no

    The first 5 entries are the Veritas Netbackup client processes and not
    the problem.

    Any ideas?

    Thx,
    CC

    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list
    

  • Next message: Jason Staudenmayer: "RE: ARG: Xinetd is listening on port tcp:514????@"