Instant messaging services is enabled

chindi — Wed, 11 May 2011 09:10:31 GMT

Hi guys,
An audit was carried out of our servers which revealed that Instant messaging services is enabled on our hpux hosts...

how do i disable it..bcoz i wasnot able to found the exact name of this service installed by HP..

hpux11i v2 O.S.

Re: Instant messaging services is enabled

g3jza — Wed, 11 May 2011 09:16:29 GMT

Hi,
try checking with #netstat -a
to see what services/daemons are listening on which ports and which connections are initiated.
Might even check /etc/inetd.conf to comment out those services and restart inetd

Re: Instant messaging services is enabled

chindi — Wed, 11 May 2011 09:19:35 GMT

Hi ,

root #/ >netstat -a
Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign Address (state)
tcp 0 0 cedge1.22 10.1.4.25.2741 ESTABLISHED
tcp 0 0 cedge1.22 10.1.5.27.1193 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.23.62.3889 ESTABLISHED
tcp 0 0 10.1.4.45.1521 192.168.12.142.11439 ESTABLISHED
tcp 0 0 cedge1.63654 cedge1.1521 ESTABLISHED
tcp 0 0 10.1.4.45.1521 *.* LISTEN
tcp 0 0 10.1.4.45.1521 10.9.198.130.51883 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3756 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2734 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2465 ESTABLISHED
tcp 0 0 *.49172 *.* LISTEN
tcp 0 0 cedge1.b24gw_f_01 10.1.4.61.59680 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3831 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.50352 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2468 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3822 ESTABLISHED
tcp 0 0 cedge1.59678 cedge1.1521 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.57755 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2483 ESTABLISHED
tcp 0 0 *.fone_it *.* LISTEN
tcp 0 0 cedge1.55827 cedge1.1521 ESTABLISHED
tcp 0 0 *.2148 *.* LISTEN
tcp 0 0 localhost.49169 *.* LISTEN
tcp 0 0 cedge1.1521 10.1.4.61.59633 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.17.62.1392 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3280 ESTABLISHED
tcp 0 0 *.b24gw_d_01 *.* LISTEN
tcp 0 0 cedge1.55206 cedge2.hacl-hb ESTABLISHED
tcp 0 0 cedge1.fone_it 10.1.5.78.4310 CLOSE_WAIT
tcp 0 0 cedge1.atmR_EFO 10.1.4.176.63071 ESTABLISHED
tcp 0 0 10.1.4.45.1521 10.9.198.162.43175 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.4953 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2994 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3828 ESTABLISHED
tcp 0 0 cedge1.54128 cedge1.1521 ESTABLISHED
tcp 0 0 *.fone_v1 *.* LISTEN
tcp 0 0 cedge1.1521 10.1.4.61.59555 ESTABLISHED
tcp 0 0 cedge1.hacl-hb *.* LISTEN
tcp 0 0 *.10864 *.* LISTEN
tcp 0 0 cedge1.1521 cedge1.57607 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.17.62.1393 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.6.62.2267 ESTABLISHED
tcp 0 0 10.1.4.45.1521 10.9.196.82.46666 ESTABLISHED
tcp 0 0 cedge1.22 10.1.5.26.4329 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.1276 ESTABLISHED
tcp 52 0 cedge1.22 10.1.5.26.4324 ESTABLISHED
tcp 0 0 10.1.4.50.1521 *.* LISTEN
tcp 0 0 cedge1.22 10.1.4.25.4525 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2471 ESTABLISHED
tcp 0 0 10.1.4.46.domain *.* LISTEN
tcp 0 0 *.diagmond *.* LISTEN
tcp 0 0 *.49466 *.* LISTEN
tcp 0 0 cedge1.1521 cedge1.54642 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.65531 ESTABLISHED
tcp 0 0 cedge1.b24gw_f_01 10.1.4.61.59535 ESTABLISHED
tcp 0 0 cedge1.22 10.1.5.66.2303 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2628 ESTABLISHED
tcp 0 0 cedge1.22 10.1.5.66.4885 ESTABLISHED
tcp 0 0 cedge1.57755 cedge1.1521 ESTABLISHED
tcp 0 0 cedge1.49324 cedge1.registrar ESTABLISHED
tcp 0 0 cedge1.54642 cedge1.1521 ESTABLISHED
tcp 0 0 10.1.4.45.1521 192.168.23.142.40381 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.59678 ESTABLISHED
tcp 0 0 *.atmg_EFI_1 *.* LISTEN
tcp 0 0 10.1.4.45.domain *.* LISTEN
tcp 0 0 *.shell *.* LISTEN
tcp 0 0 *.smtp *.* LISTEN
tcp 0 0 *.587 *.* LISTEN
tcp 0 0 localhost.7161 *.* LISTEN
tcp 0 0 *.login *.* LISTEN
tcp 0 0 cedge1.63823 cedge1.1521 ESTABLISHED
tcp 0 0 *.852 *.* LISTEN
tcp 0 0 *.b24gw_g_01 *.* LISTEN
tcp 0 0 cedge1.b24gw_f_01 10.1.4.61.59630 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2708 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.53980 ESTABLISHED
tcp 0 0 cedge1.hacl-gs cedge2.56338 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2991 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3018 ESTABLISHED
tcp 0 0 *.wbem-https *.* LISTEN
tcp 0 0 localhost.49164 localhost.49163 ESTABLISHED
tcp 0 0 localhost.49163 localhost.49164 ESTABLISHED
tcp 0 0 *.printer *.* LISTEN
tcp 0 0 cedge1.1521 cedge1.51380 ESTABLISHED
tcp 0 0 *.exec *.* LISTEN
tcp 0 0 *.fone_gb *.* LISTEN
tcp 0 0 localhost.49175 *.* LISTEN
tcp 0 0 *.2301 *.* LISTEN
tcp 0 0 *.2121 *.* LISTEN
tcp 0 0 10.1.4.52.1521 *.* LISTEN
tcp 0 0 cedge1.22 10.1.4.25.2750 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2963 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2188 ESTABLISHED
tcp 0 0 10.1.4.45.1521 192.168.23.142.40380 ESTABLISHED
tcp 0 0 cedge1.62736 cedge1.1521 ESTABLISHED
tcp 0 0 cedge1.atmg_EFI_1 192.168.1.1.49700 ESTABLISHED
tcp 0 0 cedge1.57134 cedge1.1521 ESTABLISHED
tcp 0 0 localhost.clvm-cfg *.* LISTEN
tcp 0 0 *.atmR_EFO *.* LISTEN
tcp 0 0 cedge1.22 10.1.4.25.4460 ESTABLISHED
tcp 0 0 *.fone_ru *.* LISTEN
tcp 0 0 cedge1.22 10.1.4.25.2969 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2956 ESTABLISHED
tcp 0 0 cedge1.fone_gb 10.1.5.74.2659 CLOSE_WAIT
tcp 0 0 *.49153 *.* LISTEN
tcp 0 0 cedge1.domain *.* LISTEN
tcp 0 0 *.49154 *.* LISTEN
tcp 0 0 *.b24gw_i_01 *.* LISTEN
tcp 0 0 10.1.4.50.domain *.* LISTEN
tcp 0 0 *.kshell *.* LISTEN
tcp 0 0 cedge1.ftp 10.1.4.22.45311 ESTABLISHED
tcp 0 0 *.nfsd *.* LISTEN
tcp 0 0 *.49197 *.* LISTEN
tcp 0 0 10.1.4.45.b24gw_m_01 10.9.194.2.14565 ESTABLISHED
tcp 0 0 cedge1.65531 cedge1.1521 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3022 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2715 ESTABLISHED
tcp 0 0 cedge1.b24gw_f_01 10.1.4.61.59669 ESTABLISHED
tcp 0 0 cedge1.50352 cedge1.1521 ESTABLISHED
tcp 0 0 *.b24gw_m_01 *.* LISTEN
tcp 0 0 cedge1.1521 192.168.7.62.3429 ESTABLISHED
tcp 0 0 *.1521 *.* LISTEN
tcp 0 0 cedge1.22 10.1.4.25.2973 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2626 ESTABLISHED
tcp 0 0 *.b24gw_R_01 *.* LISTEN
tcp 0 0 cedge1.22 10.1.4.25.2988 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.54128 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.57134 ESTABLISHED
tcp 0 0 cedge1.fone_v1 10.1.5.73.1988 CLOSE_WAIT
tcp 0 0 cedge1.60711 cedge1.1521 ESTABLISHED
tcp 0 0 10.1.4.45.1521 192.168.8.142.48654 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.63823 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.60711 ESTABLISHED
tcp 0 0 cedge1.b24gw_f_01 10.1.4.61.59543 ESTABLISHED
tcp 0 0 *.22 *.* LISTEN
tcp 0 0 localhost.49163 *.* LISTEN
tcp 0 0 localhost.49565 localhost.hacl-cfg ESTABLISHED
tcp 0 0 localhost.hacl-cfg localhost.49565 ESTABLISHED
tcp 0 0 cedge1.53982 cedge1.1521 ESTABLISHED
tcp 0 0 *.49322 *.* LISTEN
tcp 0 0 10.1.4.45.1521 192.168.26.142.22351 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.7.62.3428 ESTABLISHED
tcp 0 0 cedge1.54025 cedge1.1521 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3824 ESTABLISHED
tcp 0 0 *.recserv *.* LISTEN
tcp 0 0 *.klogin *.* LISTEN
tcp 0 0 cedge1.8201 10.1.4.176.54084 CLOSE_WAIT
tcp 0 0 cedge1.1521 192.168.2.62.1366 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3014 ESTABLISHED
tcp 0 0 cedge1.57921 cedge1.1521 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.4453 ESTABLISHED
tcp 0 0 cedge1.1521 10.1.4.61.59277 ESTABLISHED
tcp 0 0 *.swat *.* LISTEN
tcp 0 0 cedge1.57300 cedge1.1521 ESTABLISHED
tcp 0 0 *.dtspc *.* LISTEN
tcp 0 0 cedge1.atmg_EFI_1 192.168.1.57.65379 ESTABLISHED
tcp 0 0 cedge1.51380 cedge1.1521 ESTABLISHED
tcp 0 0 cedge1.1521 10.1.5.150.2693 ESTABLISHED
tcp 0 0 *.49465 *.* LISTEN
tcp 0 0 *.omni *.* LISTEN
tcp 0 0 cedge1.22 10.1.4.25.3829 ESTABLISHED
tcp 0 0 *.hacl-cfg *.* LISTEN
tcp 0 0 10.1.4.45.1521 192.168.12.142.11437 ESTABLISHED
tcp 0 0 cedge1.hacl-gs *.* LISTEN
tcp 0 0 *.hacl-probe *.* LISTEN
tcp 0 0 *.atmg_EFO_1 *.* LISTEN
tcp 0 0 *.fone_dh *.* LISTEN
tcp 0 0 cedge1.55207 cedge2.hacl-gs ESTABLISHED
tcp 0 124 10.1.4.45.1521 10.9.197.178.55935 ESTABLISHED
tcp 0 0 cedge1.53980 cedge1.1521 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.57921 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.4456 ESTABLISHED
tcp 0 0 localhost.49568 localhost.49567 ESTABLISHED
tcp 0 0 localhost.hacl-cfg localhost.49569 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.54025 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3266 ESTABLISHED
tcp 0 0 cedge1.22 10.1.5.63.2025 ESTABLISHED
tcp 0 0 *.8201 *.* LISTEN
tcp 0 0 *.b24gw_f_01 *.* LISTEN
tcp 0 0 cedge1.22 10.1.5.150.2223 ESTABLISHED
tcp 0 0 cedge1.22 10.1.5.66.3337 ESTABLISHED
tcp 0 0 10.1.4.45.1521 192.168.26.142.21940 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2400 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.17.62.1394 ESTABLISHED
tcp 0 0 localhost.49569 localhost.hacl-cfg ESTABLISHED
tcp 0 92 cedge1.hacl-hb cedge2.56335 ESTABLISHED
tcp 0 0 cedge1_HB.domain *.* LISTEN
tcp 0 0 localhost.domain *.* LISTEN
tcp 0 0 cedge1.1521 cedge1.63654 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.6.62.2268 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.53982 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.23.62.3884 ESTABLISHED
tcp 0 0 *.49152 *.* LISTEN
tcp 0 0 *.portmap *.* LISTEN
tcp 0 0 cedge1.57607 cedge1.1521 ESTABLISHED
tcp 0 0 localhost.49567 localhost.49568 ESTABLISHED
tcp 0 0 10.1.4.52.domain *.* LISTEN
tcp 0 0 cedge1.fone_dh 10.1.5.73.2239 CLOSE_WAIT
tcp 0 0 cedge1.1521 cedge1.55827 ESTABLISHED
tcp 0 0 cedge1.registrar cedge1.49324 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.57300 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.4.62.1758 ESTABLISHED
tcp 0 0 cedge1.atmg_EFO_1 192.168.1.1.49699 ESTABLISHED
tcp 0 0 *.4045 *.* LISTEN
tcp 0 0 *.49155 *.* LISTEN
tcp 0 0 *.49156 *.* LISTEN
tcp 0 0 cedge1.1521 192.168.18.62.4239 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.2.62.1362 ESTABLISHED
tcp 0 0 *.135 *.* LISTEN
tcp 0 0 *.49157 *.* LISTEN
tcp 0 0 10.1.4.45.1521 10.9.196.82.46663 ESTABLISHED
tcp 0 0 cedge1.1521 cedge1.62736 ESTABLISHED
tcp 0 0 cedge1.1521 192.168.18.62.4196 ESTABLISHED
tcp 0 0 cedge1.1521 *.* LISTEN
tcp 0 0 cedge1.22 10.1.4.25.3237 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2620 ESTABLISHED
tcp 0 0 cedge1.22 10.1.5.58.3412 ESTABLISHED
tcp 0 152 10.1.4.45.b24gw_m_01 192.168.12.142.11479 ESTABLISHED
tcp 0 0 cedge1.b24gw_f_01 10.1.4.61.59331 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3010 ESTABLISHED
tcp 0 0 cedge1.b24gw_f_01 10.1.4.61.59671 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3839 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.2728 ESTABLISHED
tcp 0 0 cedge1.22 10.1.5.174.1574 ESTABLISHED
tcp 0 0 cedge1.22 10.1.4.25.3292 ESTABLISHED
tcp 0 0 cedge1.55773 10.30.243.180.1423 TIME_WAIT
tcp 0 0 cedge1.55790 10.30.243.180.1423 TIME_WAIT
tcp 0 0 cedge1.55799 10.30.243.180.1423 TIME_WAIT
tcp 0 0 cedge1.55818 10.30.243.180.1423 TIME_WAIT
tcp 0 0 cedge1.55828 10.30.243.180.1423 TIME_WAIT
tcp 0 0 cedge1.55845 10.30.243.180.1423 TIME_WAIT
tcp 0 0 cedge1.55810 10.1.4.176.1984 TIME_WAIT
tcp 0 0 cedge1.55819 10.1.4.176.1984 TIME_WAIT
tcp 0 0 cedge1.55829 10.1.4.176.1984 TIME_WAIT
tcp 0 0 cedge1.55837 10.1.4.176.1984 TIME_WAIT
tcp 0 0 cedge1.55765 10.1.4.176.1984 TIME_WAIT
tcp 0 0 cedge1.55774 10.1.4.176.1984 TIME_WAIT
tcp 0 0 cedge1.55782 10.1.4.176.1984 TIME_WAIT
tcp 0 0 cedge1.55791 10.1.4.176.1984 TIME_WAIT
tcp 0 0 cedge1.55800 10.1.4.176.1984 TIME_WAIT
tcp 0 0 cedge1.55746 cedge1.1521 TIME_WAIT
tcp 0 0 cedge1.55808 cedge1.registrar TIME_WAIT
tcp 0 0 *.10864 *.* LISTEN
tcp 0 0 *.49326 *.* LISTEN
tcp 0 0 *.ftp *.* LISTEN
tcp 0 0 *.auth *.* LISTEN
tcp 0 0 *.echo *.* LISTEN
tcp 0 0 *.daytime *.* LISTEN
tcp 0 0 *.time *.* LISTEN
tcp 0 0 *.chargen *.* LISTEN
tcp 0 0 *.discard *.* LISTEN
tcp 0 0 *.22 *.* LISTEN
tcp 0 0 *.registrar *.* LISTEN
tcp 0 0 *.49250 *.* LISTEN
udp 0 0 localhost.50316 *.*
udp 0 0 *.135 *.*
udp 0 0 localhost.58771 *.*
udp 0 0 *.* *.*
udp 0 0 localhost.992 *.*
udp 0 0 cedge1.domain *.*
udp 0 0 *.2121 *.*
udp 0 0 *.50093 *.*
udp 0 0 *.49157 *.*
udp 0 0 10.1.4.50.domain *.*
udp 0 0 cedge1.ntp *.*
udp 0 0 *.49156 *.*
udp 0 0 *.49162 *.*
udp 0 0 *.instl_boots *.*
udp 0 0 *.hacl-cfg *.*
udp 0 0 *.ntp *.*
udp 0 0 cedge1_HB.ntp *.*
udp 0 0 localhost.ntp *.*
udp 0 0 *.4045 *.*
udp 0 0 *.nfsd *.*
udp 0 0 *.nfsd *.*
udp 0 0 *.49158 *.*
udp 0 0 *.49155 *.*
udp 0 0 cedge1.5301 *.*
udp 0 0 localhost.55450 *.*
udp 0 0 *.761 *.*
udp 0 0 *.* *.*
udp 0 0 cedge1.5300 *.*
udp 0 0 localhost.62354 *.*
udp 0 0 *.49161 *.*
udp 0 0 *.49312 *.*
udp 0 0 localhost.50763 *.*
udp 0 0 localhost.50091 *.*
udp 0 0 *.nfsd *.*
udp 0 0 localhost.51190 *.*
udp 0 0 10.1.4.45.domain *.*
udp 0 0 10.1.4.46.domain *.*
udp 0 0 10.1.4.52.domain *.*
udp 0 0 localhost.50090 *.*
udp 0 0 localhost.55595 *.*
udp 0 0 *.50092 *.*
udp 0 0 *.56638 *.*
udp 0 0 *.2148 *.*
udp 0 0 localhost.domain *.*
udp 0 0 cedge1_HB.domain *.*
udp 0 0 localhost.62329 *.*
udp 0 0 *.49152 *.*
udp 0 0 *.nfsd *.*
udp 0 0 *.* *.*
udp 0 0 *.161 *.*
udp 0 0 *.58395 *.*
udp 0 0 *.49154 *.*
udp 0 0 *.* *.*
udp 0 0 *.portmap *.*
udp 0 0 localhost.49208 localhost.49208
udp 0 0 *.49153 *.*
udp 0 0 *.echo *.*
udp 0 0 *.discard *.*
udp 0 0 *.daytime *.*
udp 0 0 *.chargen *.*
udp 0 0 *.xdmcp *.*
udp 0 0 *.syslog *.*

The report says IM is installed...

Re: Instant messaging services is enabled

g3jza — Wed, 11 May 2011 09:36:18 GMT

What is 'fone_v1' service ? Some mobile application according to google... You should know what you're running on your system and how to stop it / start it :) .

Anyway, try to #ps -ef
to see all the processes and look for some unidentifiable / unusual processes

Re: Instant messaging services is enabled

chindi — Wed, 11 May 2011 09:59:04 GMT

Hi ,
its our internal application.
i have hashed ntalk for time being in inetd.conf

Re: Instant messaging services is enabled

g3jza — Wed, 11 May 2011 10:04:14 GMT

So it's ok already?

topic Re: Instant messaging services is enabled in Operating System - HP-UX

Instant messaging services is enabled

Re: Instant messaging services is enabled

Re: Instant messaging services is enabled

Re: Instant messaging services is enabled

Re: Instant messaging services is enabled

Re: Instant messaging services is enabled