xinetd.d listening twice on port 69
Mark Sargent
powderkeg at snow.email.ne.jp
Wed Apr 6 07:15:32 UTC 2005
Mark Sargent wrote:
> Andy Green wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Radek Vokál wrote:
>> | On Tue, 2005-04-05 at 07:20 +0100, Andy Green wrote:
>> |
>> |
>> |>| udp 0 0 0.0.0.0:69 0.0.0.0:*
>> |>| 4995/xinetd
>> |>| udp 0 0 0.0.0.0:69 0.0.0.0:*
>> |>| 4995/xinetd
>> |>
>> |>Lol... well, I learnt something today already.
>> |>
>> |
>> |
>> | This might be a bug in netstat. I was fixing an issue recently that
>> some
>> | entries appeard twice in tcp section. I didn't thought that this can
>> | happen also with udp stuff. Will try to investigate it ..
>>
>> Hi Radek -
>>
>> I would find it a nice explanation if it is a bug, because my
>> understanding of how the sockets work will not allow this scenario of a
>> single process binding two sockets to the same port and listen()-ing to
>> both. Of course my understanding can easily be broken and often is ;-)
>>
>> Here's an idea for Mark, run lsof -n | grep xinetd and see if you can
>> see two IPv4 sockets open in there or one. It's another way to look at
>> the question of how many sockets are open and by whom. Here's what I
>> get with tftp up in xinetd
>>
>> [root at server root]# lsof -n | grep xinetd
>> xinetd 3674 root cwd DIR 253,0 4096
>> 2 /
>> xinetd 3674 root rtd DIR 253,0 4096
>> 2 /
>> xinetd 3674 root txt REG 253,0 152348 7218038
>> /usr/sbin/xinetd
>> xinetd 3674 root mem REG 253,0 47496 4587569
>> /lib/libnss_files-2.3.4.so
>> xinetd 3674 root mem REG 253,0 97736 4587567
>> /lib/libnsl-2.3.4.so
>> xinetd 3674 root mem REG 253,0 108332 4587529
>> /lib/ld-2.3.4.so
>> xinetd 3674 root mem REG 253,0 215272 4587573
>> /lib/tls/libm-2.3.4.so
>> xinetd 3674 root mem REG 253,0 28632 4587552
>> /lib/libcrypt-2.3.4.so
>> xinetd 3674 root mem REG 253,0 28504 7217911
>> /usr/lib/libwrap.so.0.7.6
>> xinetd 3674 root mem REG 253,0 1524828 4587533
>> /lib/tls/libc-2.3.4.so
>> xinetd 3674 root 0r CHR 1,3 1806
>> /dev/null
>> xinetd 3674 root 1r CHR 1,3 1806
>> /dev/null
>> xinetd 3674 root 2r CHR 1,3 1806
>> /dev/null
>> xinetd 3674 root 3r FIFO 0,5
>> 7715 pipe
>> xinetd 3674 root 4w FIFO 0,5
>> 7715 pipe
>> xinetd 3674 root 5u IPv4 7837 UDP
>> *:tftp
>> xinetd 3674 root 7u unix 0xef733dc0 7719
>> socket
>>
>> - -Andy
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.1 (GNU/Linux)
>> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>>
>> iD8DBQFCUpHfjKeDCxMJCTIRAoM1AKCFUosI/+BFZr3PVfV2lFPkwYO5VwCgiAKU
>> CeWphxIqUtB962j6EI2D3lE=
>> =QkFJ
>> -----END PGP SIGNATURE-----
>>
> Hi All,
>
> ok, will do this at work tomorrow, as the machne is there. Cheers.
>
> Mark Sargent.
>
Hi All,
below is the results. I have no idea what I'm looking at/for.
[root at localhost base-1.1]# lsof -n | grep xinetd
xinetd 5105 root cwd DIR 3,3
4096 2 /
xinetd 5105 root rtd DIR 3,3
4096 2 /
xinetd 5105 root txt REG 3,3 152348
122966 /usr /sbin/xinetd
xinetd 5105 root mem REG 3,3 215272
356961 /lib /tls/libm-2.3.4.so
xinetd 5105 root mem REG 3,3 97736
357071 /lib /libnsl-2.3.4.so
xinetd 5105 root mem REG 3,3 28504
123002 /usr /lib/libwrap.so.0.7.6
xinetd 5105 root mem REG 3,3 1524828
356936 /lib /tls/libc-2.3.4.so
xinetd 5105 root mem REG 3,3 47496
778949 /lib /libnss_files-2.3.4.so
xinetd 5105 root mem REG 3,3 28632
357090 /lib /libcrypt-2.3.4.so
xinetd 5105 root mem REG 3,3 108332
356935 /lib /ld-2.3.4.so
xinetd 5105 root 0r CHR 1,3
1980 /dev /null
xinetd 5105 root 1r CHR 1,3
1980 /dev /null
xinetd 5105 root 2r CHR 1,3
1980 /dev /null
xinetd 5105 root 3r FIFO 0,5
9850 pipe
xinetd 5105 root 4w FIFO 0,5
9850 pipe
xinetd 5105 root 5u IPv4 9911
TCP *:25 00 (LISTEN)
xinetd 5105 root 6u IPv4 9912
TCP *:po p3 (LISTEN)
xinetd 5105 root 7u unix 0xcedda940
9852 sock et
xinetd 5105 root 8u IPv4 9913
UDP *:tf tp
xinetd 5105 root 9u IPv4 9914
UDP *:tf tp
Cheers.
Mark Sargent.
More information about the fedora-list
mailing list