LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-23-2006, 08:33 AM   #1
czezz
Member
 
Registered: Nov 2004
Distribution: Slackware/Solaris
Posts: 934

Rep: Reputation: 44
inetd[14870]: auth/tcp (2): bind: Address already in use


Since many days syslog is receiving entries like shown below.
Does anyone know what may cause this problem ?

PHP Code:
Dec 23 13:45:39 proxy-2 inetd[14870]: auth/tcp (2): bindAddress already in use
Dec 23 13:55:39 proxy-2 inetd[14870]: auth/tcp (2): bindAddress already in use
Dec 23 14:05:39 proxy-2 inetd[14870]: auth/tcp (2): bindAddress already in use
Dec 23 14:15:39 proxy-2 inetd[14870]: auth/tcp (2): bindAddress already in use
Dec 23 14:25:39 proxy-2 inetd[14870]: auth/tcp (2): bindAddress already in use
Dec 23 14:35:39 proxy-2 inetd[14870]: auth/tcp (2): bindAddress already in use
Dec 23 14:45:39 proxy-2 inetd[14870]: auth/tcp (2): bindAddress already in use
Dec 23 14:55:39 proxy-2 inetd[14870]: auth/tcp (2): bindAddress already in use
Dec 23 15:05:39 proxy-2 inetd[14870]: auth/tcp (2): bindAddress already in use
Dec 23 15:15:13 proxy-2 inetd[30255]: auth/tcp (2): bindAddress already in use
Dec 23 15:25:13 proxy-2 inetd[30255]: auth/tcp (2): bindAddress already in use 
 
Old 12-24-2006, 07:31 AM   #2
live_dont_exist
Member
 
Registered: Aug 2004
Location: India
Distribution: Redhat 9.0,FC3,FC5,FC10
Posts: 257

Rep: Reputation: 30
You get an "Address already in use" whenever there is a program/service which is trying to listen on a specific port but there's already something running on it.

So for example: If there's a daemon running on port 5678 and its running, and then you have another program which is trying to listen on port 5678 it wouldnt be allowed to do so coz there's only 1 program which can be allowed to run on 5678 at a time.

So in your case the inetd daemon which controls a lot of other things as well is attempting to start a program on a specific port which is already in use...mostly because of aprogram which started when the system booted up.

You'll need to find out which process is trying to do a bind to that port. Run a tail -f /var/log/messages in 1 window and as soon as you see the bind error appear do an lsof -i to find out which process has that process ID.

This should help you backtrack and find out whats causing the problem.

Cheers
Arvind
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
(98)Address already in use: make_sock: could not bind to address 0.0.0.0:443 bruvajon Linux - Software 34 11-30-2011 03:08 PM
what does it mean auth-nxdomain yes; at named.conf by BIND 9 cccc Linux - Networking 1 11-21-2011 11:02 PM
sun-dr/tcp: bind: Address already in use choonseng Solaris / OpenSolaris 2 10-18-2004 02:48 AM
tcp-echo server- bind() returns -1 vmbhosale Linux - Networking 1 03-15-2004 12:21 PM
inetd and auth pipas_ Programming 0 06-20-2001 08:53 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:05 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration