nlockmgr on port 600, What is it?

[Wes O'Neal]

Hi, I got a call today about port 600 on our HP 9000/755 running HP-UX 10.20. After checking I found that nlockmgr was registered to that port but I've been unable to find out what it is and what it does. Anyone know anything about this and what it is for/does?

From rpc
> nlockmgr 100021

From rpcinfo

> 100021 1 tcp 1016 nlockmgr
> 100021 1 udp 1028 nlockmgr
> 100021 3 tcp 1020 nlockmgr
> 100021 3 udp 1029 nlockmgr
> 100021 4 tcp 600 nlockmgr
> 100021 4 udp 1030 nlockmgr
> 100020 1 udp 4045 llockmgr
> 100020 1 tcp 4045 llockmgr
> 100021 2 tcp 607 nlockmgr

[Brian Markus]

Are you running Oracle Parrellel Server? It has a node Lock manager" That sounds like what it might be.

[Wes O'Neal]

No. Oracle isn't running or installed. We mainly use the system as a file server for some of our data acquisition systems and for running some custom code. It's a very basic system with not much on it besides HP-UX 10.20 and lots of custom code. The only commercial type apps I can remember installing (it has been a few years since I've installed anything other than a couple of patches here and there) is Softbench, the SharedX stuff for the X-terms, and the lrom (manual) software. Basically, the security guy called b/c port 600 is setup to listen and he was making sure that is supposed to be happening. He was concerned about some worm/backdoor that is popular on the Suns that use port 600. So now, I'm trying to prove it's not something like that but I can't seem to find out what the nlockmgr is or is doing. Any other ideas?

[A. Clay Stephenson]

Hi,

nlockmgr is the lock manager for Network File Systems (NFS). It is a normal process.

Clay

[Wes O'Neal]

Thanks!

I thought it would take a while to get a response so thanks to both of you for such a quick response.

[Satish Y · Accepted solution]

Hi,

nlockmger is lock manager for NFS, It is responsible for starting rpc.statd and rpc.lockd.

from amn pages,
rpc.lockd: server that processes file locking requests from local kernel or from other remote lock daemon.
rpc.statd: It interacts with lockd to provide crash and recovery functions for the locking services on NFS

Above daemons runs on both client and server.
Hope it is clear

Cheers...
satish.

[Wes O'Neal]

Okay, thanks for the added details. I'll pass those along to the security guy. I'm sure the above responses will satisfy him. Thanks again to all those that responded.