Re: ghost tcp/udp LISTEN ports

On Sat, 31 Mar 2007 16:06:20 +0100, Ian Northeast wrote:

On Sat, 31 Mar 2007 07:50:20 +0200, Robert M. Stockmann wrote:

On Sat, 31 Mar 2007 03:50:47 +0200, Robert M. Stockmann wrote:

[wikiwork:root]:(~)# netstat -ltunp | grep " - " tcp 0 0
0.0.0.0:32769 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:2049 0.0.0.0:*
LISTEN - udp 0 0 0.0.0.0:32768
0.0.0.0:* - udp 0 0
0.0.0.0:2049 0.0.0.0:* -
[wikiwork:root]:(~)# uname -r
2.6.12
[wikiwork:root]:(~)#

[jackson:root]:(~)# netstat -ltunp | grep " - " tcp 0 0
0.0.0.0:32768 0.0.0.0:* LISTEN - tcp 0
0 0.0.0.0:2049 0.0.0.0:* LISTEN - udp
0 0 0.0.0.0:2049 0.0.0.0:*
- udp 0 0 0.0.0.0:32770 0.0.0.0:*
- udp 0 0 0.0.0.0:799 0.0.0.0:*
- [jackson:root]:(~)# uname -r
2.6.7
[jackson:root]:(~)#

which 2.6.xx kernel and solves the above bug?

[jackson:root]:(~)# netstat -ltunp | grep " - " tcp 0 0
0.0.0.0:2049 0.0.0.0:* LISTEN -
tcp
0 0 0.0.0.0:60269 0.0.0.0:*
LISTEN - udp 0 0 0.0.0.0:2049 0.0.0.0:*
- udp 0 0 0.0.0.0:32770
0.0.0.0:* - [jackson:root]:(~)# uname -r
2.6.17
[jackson:root]:(~)#

well...is this a kernel bug? or a kernel config bug?

Many of those look like the sort of port numbers RPC services would use,
and 2049 is NFS. What does "rpcinfo -p" have to say on the affected
machines?

It's also worth getting the latest source for lsof from
ftp://vic.cc.purdue.edu/pub/tools/unix/lsof and building it on the machine
you are running it on. Lsof is very sensitive to differences between the
build and execution environments and can report incorrect results if they
don't match closely enough, especially IME in the network area. So if
you've upgraded things it could be getting it wrong.

Regards, Ian
.

Relevant Pages

  • Re: [PATCH 1/2] LogFS proper
    ... Please comment the structure with kernel doc comments and avoid the tail ... Do enums have a significant ... Also the BUG itself will give you enough clue where it happened, ... which leaves only the prepared filesystem image to worry about. ...
    (Linux-Kernel)
  • Re: 2.6.25 crash: EIP: [] xfrm_output_resume+0x64/0x100 ss:esp 0068:c03a1e5c
    ... please include in all bug reports as ... This linux box is an ipsec gateway and ... # Linux kernel version: 2.6.25 ... # PCI IDE chipsets support ...
    (Linux-Kernel)
  • Server Crash (2.6.17-1.2157)- BUG: soft lockup detected on CPU#3!
    ... I just installed Fedora Core Kernel 2.6.17-1.2157_FC5smp and immediately got a "BUG: soft lockup detected on CPU#3!", I've never had this on any other kernel version before, but on my desk top PC and now this server with this specific kernel. ... isg-dev7 kernel: CPU: 3 ... kernel BUG at include/linux/list.h:185! ... MEM window: dd200000-dd3fffff ...
    (Fedora)
  • please pull from the trivial tree
    ... Fix spelling in E1000_DISABLE_PACKET_SPLIT Kconfig description ... +- Finding patch that caused a bug ... +Always try the latest kernel from kernel.org and build from source. ... Length of input string in bytes ...
    (Linux-Kernel)
  • Re: [Bug #12660] Linux 2.6.28.7 freezing on a 32-bits x86 Thinkpad T43p
    ... this bug is very weird and makes little sense. ... unable to handle kernel NULL pointer dereference at 00000000 ... # AX.25 network device drivers ...
    (Linux-Kernel)