Re: [cobalt-users] [Raq2/Qube2] Sleeping nfsoid loaded in Kernels?

[Mike Vanecek <nospam99@xxxxxxxxxxxx>]

On Sat, 18 Nov 2000 04:56:00 -0800, "James Hoaggs" <james_hoaggs@xxxxxxxxxx>
wrote:

:>Hi list,
:>Our machines for some reason run client processes that are stuck in the
:>kernel for a while as "nfsoid".  NFS is a connectionless and stateless
:>protocol where NFS servers run on unpredictable port numbers via UDP
:>or TCP.  Is NFS still sleeping somewhere within the NFS code via the
:>kernel or modules based on our results below?

[snip]

:>So we did:
:>[root@www /]# /usr/sbin/rpc.nfsd --version   or
:>[root@www /]# /usr/sbin/showmount --version
:>we received:
:>Universal NFS Server 2.2beta37
:>
:>When we do a /etc/rc.d/init.d/nfs status we get:
:>rpc.mountd is stopped
:>rpc.nfsd is stopped

:>By issuing the command it looks like it just stopped,
:>just like when you stop ssh and such.
:>NFS is very insecure - file systems can be mounted and remounted even
:>if the computer is re-booted, shutdown, or even disk copied to an other
:>hard drive, the file systems can still be accessed at a later time. Hence
:>we ask how to remove nfsoid from being generated at startup.

Getting exactly the same result. Even though asleep and swapped out (SW), I
wonder what it would take to activate them?

Also, if I do a netstat -a, I find a port being listened to by an unknown
program. Sure wish we had an up-to-date kernel - we could use the -p option
with netstat and use ipchains instead of ipfwadm. 

tcp        0      0 *:7937              *:*                  LISTEN      root

If you find out how to remove them and shut them down, please do share the
results.