How to read ucx show dev output

[Wim Van den Wyngaert]

if you do a ucx show dev for the SNMP processes you see in the line "host"
127.0.0.1 local as well as remote (e.g. dest port 705).

What is this exactly ?

Wim

[Richard Whalen · Accepted solution]

Port 705 is used for SNMP Agent eXtension (RFC 2741) communication. The TCP/IP Services SNMP service consists of 3 processes: a main process that receives and sends SNMP packets, a process that handles OS (actually TCP/IP) mibs, and a process that handles the host resources mib. The main process communicates with the other two processes via the Agent X protocol over the loopback address. Because there is a TCP connection over the loopback address it will show up in both the local and remote columns.
You will see a lot more of these connections if you start up the insight management agents, as they too use Agent X for communication with the main SNMP agent.

[Wim Van den Wyngaert]

Another one that is held by "DESTA Director".

Source host and remote host both *.
Ports are both 0.
State CANTSENDMORE VANTERECVMORE PRIV.
No bytes transferred (on my node).

Wim

[Wim Van den Wyngaert]

Found that shutdown ( http://www.osxfaq.com/man/2/shutdown.ws ) causes the CANT*. So they forgot to close the socket in DESTA ?
Is the * host and 0 port caused by this ?

Wim