PDA

View Full Version : /etc/services Suse 11.1 queston



dunleav1
19-Dec-2013, 05:02
I have a port in /etc/services (1521) that I want to change the
description of so when I run tcpdump or wireshark it displays the proper string.

port 1521 is defined for ncube-lm (because it's officially registered) but it's being used by lsnrctl for
Oracle.
I changed the description in /etc/services and rebooted the server.
If I
run wireshark and monitor on that port it comes up as:
TCP 10983 > ncube-lm [FIN, ACK].
How do I get the /etc/services change to be updated ?
Thanks,
JD

malcolmlewis
19-Dec-2013, 06:17
On Thu 19 Dec 2013 04:04:01 AM CST, dunleav1 wrote:


I have a port in /etc/services (1521) that I want to change the
description of so when I run tcpdump or wireshark it displays the proper
string.

port 1521 is defined for ncube-lm (because it's officially registered)
but it's being used by lsnrctl for
Oracle.
I changed the description in /etc/services and rebooted the server.
If I
run wireshark and monitor on that port it comes up as:
TCP 10983 > ncube-lm [FIN, ACK].
How do I get the /etc/services change to be updated ?
Thanks,
JD




Hi
There isn't an entry in $HOME/.wireshark/services?
http://www.wireshark.org/docs/wsug_html_chunked/ChAppFilesConfigurationSection.html

Assuming you have added to /etc/services or the $HOME one it should
translate;


lsnrctl 10983/tcp
lsnrctl 10983/udp


--
Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
SLED 11 SP3 (x86_64) GNOME 2.28.0 Kernel 3.0.101-0.8-default
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below... Thanks!

smflood
19-Dec-2013, 11:45
On 19/12/2013 04:04, dunleav1 wrote:

> I have a port in /etc/services (1521) that I want to change the
> description of so when I run tcpdump or wireshark it displays the proper
> string.
>
> port 1521 is defined for ncube-lm (because it's officially registered)
> but it's being used by lsnrctl for
> Oracle.
> I changed the description in /etc/services and rebooted the server.
> If I
> run wireshark and monitor on that port it comes up as:
> TCP 10983 > ncube-lm [FIN, ACK].
> How do I get the /etc/services change to be updated ?

Firstly what do you mean by "Suse 11.1" in the subject - SUSE Linux
Enterprise Server (SLES) 11 SP1, SUSE Linux Enterprise Desktop (SLED) 11
SP1, or openSUSE 11.1?

Given your question I'm wondering if you're using openSUSE 11.1 in which
case you should repost your question in the openSUSE Forums @
http://forums.opensuse.org/

HTH.
--
Simon
SUSE Knowledge Partner

------------------------------------------------------------------------
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.
------------------------------------------------------------------------

jmozdzen
19-Dec-2013, 14:21
Hi JD,

Malcolm's reference should help to solve your actual question. OTOH, I'd like to stress that /etc/services does *not* contain "descriptions", but is a name-to-number (as well as number-to-name) lookup table. So your change will break every application that is looking to use "ncube-lm" by name. I strongly recommend not to alter / delete entries in that file, unless it doesn't match the entries listed in the official registry (see http://tools.ietf.org/html/rfc6335 for a description of the process and http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml for the current list. Port 1521 is described on page 26 of that list).

Regards,
Jens

hendersj
19-Dec-2013, 21:15
On Thu, 19 Dec 2013 10:45:26 +0000, Simon Flood wrote:

> Firstly what do you mean by "Suse 11.1" in the subject - SUSE Linux
> Enterprise Server (SLES) 11 SP1, SUSE Linux Enterprise Desktop (SLED) 11
> SP1, or openSUSE 11.1?
>
> Given your question I'm wondering if you're using openSUSE 11.1 in which
> case you should repost your question in the openSUSE Forums @
> http://forums.opensuse.org/
>
> HTH.

FWIW, he came over here because he had originally posted in the openSUSE
forums, but is using SLE.

He's in the right place. :)

Jim

--
Jim Henderson, CNA6, CDE, CNI, LPIC-1, CLA10, CLP10
Novell/SUSE/NetIQ Knowledge Partner