My logwatch report is showing up each morning with the following error messages in it:
xinetd[1824]: START: sgi_fam pid=13208 from=<no address> xinetd[13208]: FAIL: sgi_fam libwrap from=<no address> xinetd[1824]: START: sgi_fam pid=13209 from=<no address> xinetd[13209]: FAIL: sgi_fam libwrap from=<no address> xinetd[1824]: START: sgi_fam pid=13210 from=<no address> xinetd[13210]: FAIL: sgi_fam libwrap from=<no address> xinetd[1824]: START: sgi_fam pid=13211 from=<no address> xinetd[13211]: FAIL: sgi_fam libwrap from=<no address> xinetd[1824]: START: sgi_fam pid=13212 from=<no address> xinetd[13212]: FAIL: sgi_fam libwrap from=<no address> xinetd[1824]: START: sgi_fam pid=13213 from=<no address> xinetd[13213]: FAIL: sgi_fam libwrap from=<no address>
I'm not sure what they are or how I can stop them. This is just small sample, there are many many many hundreds more. Can someone shed some light on this for me? Thanks!
Are you providing any services through xinetd? If not, just turn it off entirely (service xinetd stop ; chkconfig xinetd off) and it will stop complaining about clients trying to access them.
You might, however, want to find out who or what is trying to make these connections, for example by running tcpdump and looking for fam packets.
