To find out about the mon service, one place to start is by typing
"rpm -ql mon". It will show there's a file /etc/rc.d/init.d/mon, which
probably means mon is known by chkconfig. The command "chkconfig --list
mon" will tell you the status of mon; it's probably on in levels 3, 4, and
5. The "chkconfig --list" command, without specifying the service, shows
the status of all services. You can turn services on and off with
chkconfig. For example, "chkconfig mon off" should get rid of mon for you
until you figure out how to make it do what you want.
Also shown in the list made by "rpm -ql mon" should be a bunch of
documentation files in /usr/share/doc/mon-0.38.18, along with
/usr/share/man/man1/mon.1.gz, moncmd.1.gz, and monshow.1.gz. So "man
mon", "man moncmd", and "man monshow" could supply useful information.
On Wed, 5 Dec 2001, Mark Seven Smith wrote:
> ...
> I am not sure of the value of such a program as "mon"
> anyhow; since, after all, I really DON'T want to have
> telnet available! There's probably a way to tell it not to
> check for the telnet port availability; however you should
> see some of the OTHER weird notices I get! They are very
> long; which is why I haven't posted them on the list.
> Besides the headers in the mail, there are 68 lines of
> either "Security Violations", or "Unusual System Events".
> And example of the former is:
>
> 3 Dec 4 16:01:59 CX9465-a mon[1195]: failure for servers
> http 1007510519 localhost
>
> And the other type's example would be:
>
> 37 Dec 4 16:01:59 CX9465-a mon[1195]: failure for servers
> http 1007510519 localhost
>
> Not a lot of difference, huh? I don't get that part at
> all...
>
> And the thing is, I get dozens of mails for root, just like
> this, every day! I just checked, and there are 42 listed
> right now!
>
> It seems to be monitoring for UNAVAILABLE services...is
> there an easy way to make it do the inverse? And let me
> know if, for instance, the telnet port suddenly opened up
> for no reason? THAT might be useful! <g!>
>
> Anyway, I want to turn it off, but in looking at the "man
> mon" page I don't see a way to do that. It seems harder to
> make things stop, than it does to make things go. Dang...
>
> Any advice would be appreciated.
>
--
Steven Yellin
_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list
