Security Scan

[joe_91]

Ident Service (Potential Bot/Zombie) Detected


Check to see if the ident service was started legitimately. If not, or if not required, disable the ident service. Also, scan the host with an updated antivirus scanner for infection.

what does the Ident Service mean? Also there is no Virus in Unix right?

Thanks

Joe

[Ivan Krastev]

I think this is output from some security scanner. Take a look at /etc/inetd.conf - maybe you have ident service running. If you don't need it simply comment that line (with #) and reload inetd (inetd -c).

regards,
ivan

[spex]

Joe,

The ident protocol identifies the username of the current user to a (remote) process. It runs on 113/tcp by default. This is most likely a false positive.

To disable identd, comment out the appropriate line in /etc/inetd.conf and 'inetd -c'.

For more information on ident:
http://en.wikipedia.org/wiki/Ident

There are UNIX viruses, but their number is tiny compared to the Windows world.

PCS

[john D_3]

Hi,

Please comment the following line in /etc/inetd.conf file:

ident stream tcp wait bin /usr/lbin/identd identd

and run inetd -c

Thanks

[Bill Hassell]

ident is one of the archaic Unix services that are almost never used but like finger and rwho, they provide too much information about your system. Just comment it out and inetd -c re-read the file. Other archaic services:

uucp ntalk time daytime echo discard chargen

[Robert Fritz]

The only really popular thing I can think of that (currently) relies on it is ServiceGuard.