CentOS - Apr 2006 - smux service (port 199)

Hi,

when I run a nmap localhost I see that port 199 is open for the smux service
but when I check the services gui in runlevel 3 or 5 I don't find it.
It's
also not in /etc/init.d/

At the moment almost everything is inactive except for  some well known
services like httpd crond etc. but mux is still there.

Does anyone know how to colse this service?

regards, ivago
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.centos.org/pipermail/centos/attachments/20060427/5d4ae0aa/attachment.html>

On 27/04/06, D. Ivago <batsleer at gmail.com>
wrote:
> when I run a nmap localhost I see that port 199 is open for the smux
service
> but when I check the services gui in runlevel 3 or 5 I don't find it.
It's
> also not in /etc/init.d/
Do netstat, ps, lsof or any other tools show anything of use?

# netstat -ln
# ps auxw | grep -Ei 'snmp|smux'
# lsof -i :199

Will.

> -----Original Message-----
> From: centos-bounces at centos.org 
> [mailto:centos-bounces at centos.org] On Behalf Of D. Ivago
> Sent: Thursday, 27 April 2006 9:54 p.m.
> To: centos at centos.org
> Subject: [CentOS] smux service (port 199)
> 
> Hi,
> 
> when I run a nmap localhost I see that port 199 is open for 
> the smux service but when I check the services gui in 
> runlevel 3 or 5 I don't find it. It's also not in /etc/init.d/ 
> 
> At the moment almost everything is inactive except for  some 
> well known services like httpd crond etc. but mux is still there. 
> 
> Does anyone know how to colse this service?
It's part of SNMP (multiplexer for sub-agents to connect to the master
agent I believ).  If you are on Centos3, you're out of luck - that
version of net-snmp cannot turn it off (you'll have to use iptables or
the like to block it).  If you're on Centos4, you can add the following
line to snmpd.conf:

smuxsocket 127.0.0.1

And restart snmpd.  This doesn't close the port, but means that snmpd
only listens to it on localhost so it is inaccessible from other hosts
on the network.  Nmap on "localhost" will still show it up as open,
but
from anywhere else on the network it won't.

Craig Miskell
======================================================================Attention:
The information contained in this message and/or attachments
from AgResearch Limited is intended only for the persons or entities
to which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipients is prohibited by AgResearch
Limited. If you have received this message in error, please notify the
sender immediately.
=======================================================================