stop snmp?

hmm · n00b Joined: 23 Feb 2003 Posts: 14

Hi all,

I have a problem here, when I portscan my system snmp and snmptrap are giving out info about my system, now how do I stop those services?

I didnt even start them nor do I know what started them, I am only running quake and ssh. I forgot some options while building the kernel so I cant use iptables to block the ports, is there I way to stop these 2 snmp services or to block the ports somehow else?

-thx

Strubenator · n00b Joined: 17 Mar 2003 Posts: 19 Location: Frederick, MD

You should be able to stop these immendetly by runing /etc/init.d/snmp(or whatever) stop. If you want this to be permanant run rc-update del snmp(or whatever) default.

--Strube

hmm · n00b Joined: 23 Feb 2003 Posts: 14

hmm · n00b Joined: 23 Feb 2003 Posts: 14

any1 have any clue?

gfdsa · n00b Joined: 01 Jul 2002 Posts: 74

grep -i SNMP .config
# CONFIG_IP_NF_NAT_SNMP_BASIC is not set

netstat -anp|grep :161
udp 0 0 0.0.0.0:161 0.0.0.0:*

hmm · n00b Joined: 23 Feb 2003 Posts: 14

Strubenator · n00b Joined: 17 Mar 2003 Posts: 19 Location: Frederick, MD

If netstat shows nothing and you still get resaults from the scans, I would doouble check everything (sometimes I end up mixing up the addresses of the scans). If everything checks out it may be a strange r00tkit but that's pure speculation.

--Strube

gfdsa · n00b Joined: 01 Jul 2002 Posts: 74

check tcp 199