ARG: Xinetd is listening on port tcp:514????@
Keg
redhat at zulu420.com
Sat May 22 15:53:08 UTC 2004
Please disregard the last post, I still had syslog running in the screen
output, but here I shut it down and you can see that when syslogd is NOT
running and xinetd is NOT running, the only bound sockets are as follows:
syslog:/etc/xinetd.d #netstat -apn | grep LIST
tcp 0 0 0.0.0.0:32768 0.0.0.0:*
LISTEN 1506/rpc.statd
tcp 0 0 0.0.0.0:22 0.0.0.0:*
LISTEN 1583/sshd
unix 2 [ ACC ] STREAM LISTENING 1902
1618/gpm /dev/gpmctl
unix 2 [ ACC ] STREAM LISTENING 3576
2169/xfs /tmp/.font-unix/fs7100
unix 2 [ ACC ] STREAM LISTENING 16909
9236/sshd /tmp/ssh-XXqFMQ1t/agent.9236
syslog:/etc/xinetd.d #ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 May19 ? 00:00:05 init
root 2 0 0 May19 ? 00:00:00 [migration/0]
root 3 0 0 May19 ? 00:00:00 [migration/1]
root 4 1 0 May19 ? 00:00:00 [keventd]
root 5 1 0 May19 ? 00:00:02 [ksoftirqd_CPU0]
root 6 1 0 May19 ? 00:00:00 [ksoftirqd_CPU1]
root 11 1 0 May19 ? 00:00:00 [bdflush]
root 7 1 0 May19 ? 00:00:00 [kswapd]
root 8 1 0 May19 ? 00:00:00 [kscand/DMA]
root 9 1 0 May19 ? 00:03:18 [kscand/Normal]
root 10 1 0 May19 ? 00:01:31 [kscand/HighMem]
root 12 1 0 May19 ? 00:00:01 [kupdated]
root 13 1 0 May19 ? 00:00:00 [mdrecoveryd]
root 21 1 0 May19 ? 00:00:01 [kjournald]
root 79 1 0 May19 ? 00:00:00 [khubd]
root 1143 1 0 May19 ? 00:00:00 [kjournald]
root 1155 1 0 May19 ? 00:00:00 [kjournald]
root 1165 1 0 May19 ? 00:00:00 [kjournald]
root 1470 1 0 May19 ? 00:00:11 irqbalance
rpcuser 1506 1 0 May19 ? 00:00:00 rpc.statd
root 1567 1 0 May19 ? 00:00:00 [rpciod]
root 1568 1 0 May19 ? 00:00:00 [lockd]
root 1583 1 0 May19 ? 00:00:00 /usr/sbin/sshd
root 1618 1 0 May19 ? 00:00:01 gpm -t ps/2 -m /dev/mouse
root 1627 1 0 May19 ? 00:00:00 crond
xfs 2169 1 0 May19 ? 00:00:00 xfs -droppriv -daemon
daemon 2187 1 0 May19 ? 00:00:00 /usr/sbin/atd
root 2198 1 0 May19 tty1 00:00:00 /sbin/mingetty tty1
root 2199 1 0 May19 tty2 00:00:00 /sbin/mingetty tty2
root 2200 1 0 May19 tty3 00:00:00 /sbin/mingetty tty3
root 2201 1 0 May19 tty4 00:00:00 /sbin/mingetty tty4
root 2202 1 0 May19 tty5 00:00:00 /sbin/mingetty tty5
root 2203 1 0 May19 tty6 00:00:00 /sbin/mingetty tty6
root 9236 1583 0 08:13 ? 00:00:00 /usr/sbin/sshd
root 9238 9236 0 08:13 pts/0 00:00:00 -bash
root 9431 9238 0 08:24 pts/0 00:00:00 ps -ef
When I start xinetd and ONLY xinetd:
syslog:/etc/xinetd.d #/etc/init.d/xinetd start
Starting xinetd: [ OK ]
syslog:/etc/xinetd.d #netstat -apn | grep LIST
tcp 0 0 0.0.0.0:512 0.0.0.0:*
LISTEN 9442/xinetd
tcp 0 0 0.0.0.0:32768 0.0.0.0:*
LISTEN 1506/rpc.statd
tcp 0 0 0.0.0.0:513 0.0.0.0:*
LISTEN 9442/xinetd
tcp 0 0 0.0.0.0:514 0.0.0.0:*
LISTEN 9442/xinetd
tcp 0 0 0.0.0.0:5666 0.0.0.0:*
LISTEN 9442/xinetd
tcp 0 0 0.0.0.0:873 0.0.0.0:*
LISTEN 9442/xinetd
tcp 0 0 0.0.0.0:13782 0.0.0.0:*
LISTEN 9442/xinetd
tcp 0 0 0.0.0.0:22 0.0.0.0:*
LISTEN 1583/sshd
tcp 0 0 0.0.0.0:13783 0.0.0.0:*
LISTEN 9442/xinetd
tcp 0 0 0.0.0.0:23 0.0.0.0:*
LISTEN 9442/xinetd
tcp 0 0 0.0.0.0:13722 0.0.0.0:*
LISTEN 9442/xinetd
tcp 0 0 0.0.0.0:13724 0.0.0.0:*
LISTEN 9442/xinetd
unix 2 [ ACC ] STREAM LISTENING 1902
1618/gpm /dev/gpmctl
unix 2 [ ACC ] STREAM LISTENING 26644
9446/minilogd /dev/log
unix 2 [ ACC ] STREAM LISTENING 3576
2169/xfs /tmp/.font-unix/fs7100
unix 2 [ ACC ] STREAM LISTENING 16909
9236/sshd /tmp/ssh-XXqFMQ1t/agent.9236
syslog:/etc/xinetd.d #ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 May19 ? 00:00:05 init
root 2 0 0 May19 ? 00:00:00 [migration/0]
root 3 0 0 May19 ? 00:00:00 [migration/1]
root 4 1 0 May19 ? 00:00:00 [keventd]
root 5 1 0 May19 ? 00:00:02 [ksoftirqd_CPU0]
root 6 1 0 May19 ? 00:00:00 [ksoftirqd_CPU1]
root 11 1 0 May19 ? 00:00:00 [bdflush]
root 7 1 0 May19 ? 00:00:00 [kswapd]
root 8 1 0 May19 ? 00:00:00 [kscand/DMA]
root 9 1 0 May19 ? 00:03:19 [kscand/Normal]
root 10 1 0 May19 ? 00:01:31 [kscand/HighMem]
root 12 1 0 May19 ? 00:00:01 [kupdated]
root 13 1 0 May19 ? 00:00:00 [mdrecoveryd]
root 21 1 0 May19 ? 00:00:01 [kjournald]
root 79 1 0 May19 ? 00:00:00 [khubd]
root 1143 1 0 May19 ? 00:00:00 [kjournald]
root 1155 1 0 May19 ? 00:00:00 [kjournald]
root 1165 1 0 May19 ? 00:00:00 [kjournald]
root 1470 1 0 May19 ? 00:00:11 irqbalance
rpcuser 1506 1 0 May19 ? 00:00:00 rpc.statd
root 1567 1 0 May19 ? 00:00:00 [rpciod]
root 1568 1 0 May19 ? 00:00:00 [lockd]
root 1583 1 0 May19 ? 00:00:00 /usr/sbin/sshd
root 1618 1 0 May19 ? 00:00:01 gpm -t ps/2 -m /dev/mouse
root 1627 1 0 May19 ? 00:00:00 crond
xfs 2169 1 0 May19 ? 00:00:00 xfs -droppriv -daemon
daemon 2187 1 0 May19 ? 00:00:00 /usr/sbin/atd
root 2198 1 0 May19 tty1 00:00:00 /sbin/mingetty tty1
root 2199 1 0 May19 tty2 00:00:00 /sbin/mingetty tty2
root 2200 1 0 May19 tty3 00:00:00 /sbin/mingetty tty3
root 2201 1 0 May19 tty4 00:00:00 /sbin/mingetty tty4
root 2202 1 0 May19 tty5 00:00:00 /sbin/mingetty tty5
root 2203 1 0 May19 tty6 00:00:00 /sbin/mingetty tty6
root 9236 1583 0 08:13 ? 00:00:00 /usr/sbin/sshd
root 9238 9236 0 08:13 pts/0 00:00:00 -bash
root 9442 1 0 08:25 ? 00:00:00 xinetd -stayalive
-pidfile /var/run/xinetd.pid
root 9446 1 0 08:25 ? 00:00:00 minilogd
root 9452 9238 0 08:25 pts/0 00:00:00 ps -ef
So something in xinetd is creating this socket on port 514. Here are the
only services enabled in xinetd:
bpcd: disable = no
bpjava-msvc: disable = no
nrpe: disable = no
vnetd: disable = no
vopied: disable = no
nrpe: disable = no
rexec: disable = no
rlogin: disable = no
rsh: disable = no
rsync: disable = no
telnet: disable = no
The first 5 entries are the Veritas Netbackup client processes and not
the problem.
Any ideas?
Thx,
CC
More information about the redhat-list
mailing list