[lug] meaning of logwatch message

[John Hernandez]

  sgi_fam: A Silicon Graphics daemon that is an RPC server that tracks 
changes to the filesystem

On default Redhat systems, it binds to the loopback interface only, 
meaning that it cannot be remotely accessed (hence, from=0.0.0.0).

If desired, you should be able to disable it in /etc/xinetd.d/sgi_fam 
and then send SIGHUP to xinetd.

You can use 'netstat -pan' or 'lsof -i' to see a listing of inet 
sockets (along with the process ID associated with each socket).

Michael J. Hammel wrote:
> Anyone know what this line in my secure log means:
> 
> secure:Jul 23 21:52:38 brahe xinetd[933]: START: sgi_fam pid=1721 from=0.0.0.0
> 
> The pid changes with each entry.  They showed up today for the first time.
> Is this someone pinging my machine or was I running something I didn't know
> I was running?  What is "sgi_fam"?  It's not in /etc/services.
> 
> BTW, I'm running RH 7.2 (KRUD 2002-04-01) with updates.


-- 

   - John Hernandez - Network Engineer - 303-497-6392 -
  |  National Oceanic and Atmospheric Administration   |
  |  Mailstop R/OM62. 325 Broadway, Boulder, CO 80305  |
   ----------------------------------------------------