There was a thread about this a while back. The culprit was sgi_fam. The general consensus seemed to be to leave it running. -Steve > -----Original Message----- > From: redhat-list-admin@xxxxxxxxxx > [mailto:redhat-list-admin@xxxxxxxxxx]On Behalf Of Brett Franck > Sent: Wednesday, October 29, 2003 2:18 PM > To: redhat-list@xxxxxxxxxx > Subject: Weird Ports Showing for XINETD > > > REPOST Without HTML junk......sry bout the HTML > postings.......maybe someone > has an answer to my ques? > > > > > > > Okay since I last wrote about messing up my server with a Chroot jail, > things have definately changed. > > I installed RH9 and put it on an IBM Netvista 866 w/384Mg Ram > /proc/kcore > shows 401477632 Oct 28 11:53 /proc/kcore..... Vs RH8.0 on a junker 450 > w/320Mg Ram > > All is running well but I do have one question.....maybe it > was this way in > RH 8.0, I never noticed, but I'm pretty sure I would have > noticed an open > errant port not assigned to anything. > > netstat -taup shows a UDP port open by XINETD (BY the way, > I"m not running > anything with xinetd).......I first noticed it because the > CHKROOTKIT bawled > out an alert when the XINETD port was running on 1008 ... now it's on > 923....has been on 979.....etc.....moves when I restart > Xinetd.....is this > the result of running xinetd as xinetd -stayalive -pidfile > /var/run/xinetd.pid > thus keeping a UDP port open to support the PID????? > > Brett > > > > -- > redhat-list mailing list > unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe > https://www.redhat.com/mailman/listinfo/redhat-list > -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
