On Thu, 2004-05-20 at 21:45, Greg wrote: > Lyvim Xaphir <[EMAIL PROTECTED]> wrote: > > >On Thu, 2004-05-20 at 15:33, Aron Smith wrote: > >> On Thursday 20 May 2004 12:02 pm, Lyvim Xaphir wrote: > >> > On Thu, 2004-05-20 at 13:13, Aron Smith wrote: > >> > > I have been getting a *Lot8 of disk activity around 7:00 am > >> > > the output from dmesg looks something like this > >> > > >> > > Thanks in advance > >> > > smitty > >> > > >> > Are you running xinetd, if so why, and what other services do you have > >> > running. Also are you updated to kernel 2.4.22-30mdk ? > >> Using kernel 2.6 > >> here is output from top > >> --------------------------------------------------------------------------------------- > >> 9449 root 25 0 2172 1048 1964 R 91.1 0.2 1:11.94 top > >> 4962 root 15 0 23304 11m 13m S 6.3 1.8 108:31.45 X > >> 9471 aronsmit 15 0 27956 15m 25m S 2.0 2.5 0:01.19 kdeinit > >> 6195 aronsmit 15 0 39112 27m 31m S 0.3 4.4 0:06.43 kdeinit > >> 9506 aronsmit 17 0 2172 1048 1964 R 0.3 0.2 0:00.11 top > >> 1 root 16 0 1580 516 1424 S 0.0 0.1 0:03.42 init > >> 2 root 34 19 0 0 0 S 0.0 0.0 0:00.00 ksoftirqd/0 > >> 3 root 5 -10 0 0 0 S 0.0 0.0 0:00.09 events/0 > >> 4 root 5 -10 0 0 0 S 0.0 0.0 0:00.06 kblockd/0 > >> 5 root 15 0 0 0 0 S 0.0 0.0 0:00.01 kapmd > >> 6 root 25 0 0 0 0 S 0.0 0.0 0:00.00 pdflush > >> 7 root 15 0 0 0 0 S 0.0 0.0 0:00.07 pdflush > >> 8 root 25 0 0 0 0 S 0.0 0.0 0:00.00 kswapd0 > >> 9 root 10 -10 0 0 0 S 0.0 0.0 0:00.00 aio/0 > >> 11 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kseriod > >> 15 root 15 0 0 0 0 S 0.0 0.0 0:00.07 kjournald > >> 121 root 17 0 2036 1208 1588 S 0.0 0.2 0:00.85 devfsd > >> 245 root 15 0 0 0 0 S 0.0 0.0 0:00.06 khubd > >> 562 root 15 0 0 0 0 S 0.0 0.0 0:00.08 kjournald > >> 565 root 15 0 0 0 0 S 0.0 0.0 0:00.03 kjournald > >> 827 root -2 0 1628 1628 1468 S 0.0 0.3 0:00.03 watchdog > >> 2755 rpc 15 0 1712 580 1540 S 0.0 0.1 0:00.00 portmap > >> 2779 root 16 0 1640 608 1468 S 0.0 0.1 0:00.09 syslogd > >> 2787 root 15 0 2592 1536 1416 S 0.0 0.2 0:00.16 klogd > >> 2846 root 18 0 1712 712 1540 S 0.0 0.1 0:00.00 rpc.statd > >> 3243 xfs 16 0 5384 3756 2512 S 0.0 0.6 0:00.16 xfs > >> 3268 root 18 0 1604 540 1448 S 0.0 0.1 0:00.00 hcid > >> 3279 root 10 -10 0 0 0 S 0.0 0.0 0:00.00 krfcommd > >> 4869 root 16 0 1588 536 1428 S 0.0 0.1 0:00.00 apmd > >> 4910 root 16 0 2688 692 2504 S 0.0 0.1 0:00.00 mdkkdm > >> -------------------------------------------------------------------------------------------------- > > > > > >Why is portmap running? Are you using NFS? > > > >LX > > > > > > > What is portmap and should it be running > Greg
It's a service generally used for NFS and for some reason is enabled by default on Mandrake installs; I don't use NFS, I tend to use samba more; I think the aussies have made it more secure than NFS. Portmap uses the rpc protocol, which is notoriously insecure and notoriously famous with crackers for being entryways into unsecured boxes. Especially since portmap is enabled BY DEFAULT on Mandrake boxes. If you don't run NFS, shut it down on all runlevels. LX
____________________________________________________ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com ____________________________________________________
