xinetd.d listening twice on port 69

[Mark Sargent]

Mark Sargent wrote:

> Andy Green wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Radek Vokál wrote:
>> | On Tue, 2005-04-05 at 07:20 +0100, Andy Green wrote:
>> |
>> |
>> |>| udp        0      0 0.0.0.0:69                  0.0.0.0:*
>> |>| 4995/xinetd
>> |>| udp        0      0 0.0.0.0:69                  0.0.0.0:*
>> |>| 4995/xinetd
>> |>
>> |>Lol... well, I learnt something today already.
>> |>
>> |
>> |
>> | This might be a bug in netstat. I was fixing an issue recently that 
>> some
>> | entries appeard twice in tcp section. I didn't thought that this can
>> | happen also with udp stuff. Will try to investigate it ..
>>
>> Hi Radek -
>>
>> I would find it a nice explanation if it is a bug, because my
>> understanding of how the  sockets work will not allow this scenario of a
>> single process binding two sockets to the same port and listen()-ing to
>> both.  Of course my understanding can easily be broken and often is ;-)
>>
>> Here's an idea for Mark, run lsof -n | grep xinetd and see if you can
>> see two IPv4 sockets open in there or one.  It's another way to look at
>> the question of how many sockets are open and by whom.  Here's what I
>> get with tftp up in xinetd
>>
>> [root at server root]# lsof -n | grep xinetd
>> xinetd     3674    root  cwd       DIR      253,0       4096          
>> 2 /
>> xinetd     3674    root  rtd       DIR      253,0       4096          
>> 2 /
>> xinetd     3674    root  txt       REG      253,0     152348    7218038
>> /usr/sbin/xinetd
>> xinetd     3674    root  mem       REG      253,0      47496    4587569
>> /lib/libnss_files-2.3.4.so
>> xinetd     3674    root  mem       REG      253,0      97736    4587567
>> /lib/libnsl-2.3.4.so
>> xinetd     3674    root  mem       REG      253,0     108332    4587529
>> /lib/ld-2.3.4.so
>> xinetd     3674    root  mem       REG      253,0     215272    4587573
>> /lib/tls/libm-2.3.4.so
>> xinetd     3674    root  mem       REG      253,0      28632    4587552
>> /lib/libcrypt-2.3.4.so
>> xinetd     3674    root  mem       REG      253,0      28504    7217911
>> /usr/lib/libwrap.so.0.7.6
>> xinetd     3674    root  mem       REG      253,0    1524828    4587533
>> /lib/tls/libc-2.3.4.so
>> xinetd     3674    root    0r      CHR        1,3                  1806
>> /dev/null
>> xinetd     3674    root    1r      CHR        1,3                  1806
>> /dev/null
>> xinetd     3674    root    2r      CHR        1,3                  1806
>> /dev/null
>> xinetd     3674    root    3r     FIFO        0,5                  
>> 7715 pipe
>> xinetd     3674    root    4w     FIFO        0,5                  
>> 7715 pipe
>> xinetd     3674    root    5u     IPv4       7837                   UDP
>> *:tftp
>> xinetd     3674    root    7u     unix 0xef733dc0                  7719
>> socket
>>
>> - -Andy
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.1 (GNU/Linux)
>> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>>
>> iD8DBQFCUpHfjKeDCxMJCTIRAoM1AKCFUosI/+BFZr3PVfV2lFPkwYO5VwCgiAKU
>> CeWphxIqUtB962j6EI2D3lE=
>> =QkFJ
>> -----END PGP SIGNATURE-----
>>
> Hi All,
>
> ok, will do this at work tomorrow, as the machne is there. Cheers.
>
> Mark Sargent.
>
Hi All,

below is the results. I have no idea what I'm looking at/for.

[root at localhost base-1.1]# lsof -n | grep xinetd
xinetd    5105           root  cwd       DIR        3,3     
4096          2 /
xinetd    5105           root  rtd       DIR        3,3     
4096          2 /
xinetd    5105           root  txt       REG        3,3   152348     
122966 /usr /sbin/xinetd
xinetd    5105           root  mem       REG        3,3   215272     
356961 /lib /tls/libm-2.3.4.so
xinetd    5105           root  mem       REG        3,3    97736     
357071 /lib /libnsl-2.3.4.so
xinetd    5105           root  mem       REG        3,3    28504     
123002 /usr /lib/libwrap.so.0.7.6
xinetd    5105           root  mem       REG        3,3  1524828     
356936 /lib /tls/libc-2.3.4.so
xinetd    5105           root  mem       REG        3,3    47496     
778949 /lib /libnss_files-2.3.4.so
xinetd    5105           root  mem       REG        3,3    28632     
357090 /lib /libcrypt-2.3.4.so
xinetd    5105           root  mem       REG        3,3   108332     
356935 /lib /ld-2.3.4.so
xinetd    5105           root    0r      CHR        1,3                
1980 /dev /null
xinetd    5105           root    1r      CHR        1,3                
1980 /dev /null
xinetd    5105           root    2r      CHR        1,3                
1980 /dev /null
xinetd    5105           root    3r     FIFO        0,5                
9850 pipe
xinetd    5105           root    4w     FIFO        0,5                
9850 pipe
xinetd    5105           root    5u     IPv4       9911                 
TCP *:25 00 (LISTEN)
xinetd    5105           root    6u     IPv4       9912                 
TCP *:po p3 (LISTEN)
xinetd    5105           root    7u     unix 0xcedda940                
9852 sock et
xinetd    5105           root    8u     IPv4       9913                 
UDP *:tf tp
xinetd    5105           root    9u     IPv4       9914                 
UDP *:tf tp

Cheers.

Mark Sargent.