rstatd configuration

1) Download rstatd.
2) Build and install rstatd:

$ tar xvzf rstatd.tar.gz
$ cd rpc.rstatd
$ ./configure --prefix=/usr
$ make
# sudo su
# make install

3) Add a line to /etc/hosts.allow to allow certain hosts to make rstatd requests:

rpc.rstatd:     192.168.0.0/255.255.255.0

4) Add rstatd entry in /etc/xinetd.d/rstatd:

# default: off
# description: An xinetd internal service which rstatd's characters back to clients.

service rstatd
{
    type            = RPC
    rpc_version     = 2-4
    socket_type     = dgram
    protocol        = udp
    wait            = yes
    user            = root
    only_from       = 10.0.95.0/24
    log_on_success  += USERID
    log_on_failure  += USERID
    server          = /usr/sbin/rpc.rstatd
    disable         = no
}

5) Restart xinetd:

# /etc/rc.d/init.d/xinetd restart
6) check xinetd log file

# tail -f /var/log/xinetd.log
12/10/2@15:12:55: EXIT: rstatd status=0 duration=1(sec)
12/10/2@15:12:59: START: rstatd from=192.168.77.171
12/10/2@15:13:00: EXIT: rstatd status=0 duration=1(sec)
12/10/2@15:13:03: START: rstatd from=192.168.77.171
12/10/2@15:13:04: EXIT: rstatd status=0 duration=1(sec)
12/10/2@15:13:08: START: rstatd from=192.168.77.171
12/10/2@15:13:09: EXIT: rstatd status=0 duration=1(sec)
12/10/2@15:13:12: START: rstatd from=192.168.77.171
12/10/2@15:13:13: EXIT: rstatd status=0 duration=1(sec)
12/10/2@15:13:17: START: rstatd from=192.168.77.171

# chkconfig -l
AmosStartup 0:off 1:off 2:off 3:on 4:off 5:on 6:off
HPI 0:off 1:off 2:off 3:off 4:off 5:off 6:off
Makefile 0:off 1:off 2:off 3:off 4:off 5:off 6:off
SuSEfirewall2_init 0:off 1:off 2:off 3:off 4:off 5:off 6:off
SuSEfirewall2_setup 0:off 1:off 2:off 3:off 4:off 5:off 6:off
aaeventd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
acct 0:off 1:off 2:on 3:on 4:off 5:on 6:off
acpid 0:off 1:off 2:on 3:on 4:off 5:on 6:off
alsasound 0:off 1:off 2:on 3:on 4:off 5:on 6:off
atae_agent 0:off 1:off 2:off 3:on 4:off 5:on 6:off
atd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
atop 0:off 1:off 2:off 3:on 4:off 5:on 6:off
auditd 0:off 1:off 2:off 3:on 4:off 5:on 6:off
autofs 0:off 1:off 2:off 3:off 4:off 5:off 6:off
autoyast 0:off 1:off 2:off 3:off 4:off 5:off 6:off
bmpstart 0:off 1:off 2:off 3:on 4:off 5:on 6:off
cron 0:off 1:off 2:on 3:on 4:off 5:on 6:off
dbus 0:off 1:off 2:off 3:on 4:off 5:on 6:off
dhcp6r 0:off 1:off 2:off 3:off 4:off 5:off 6:off
dhcp6s 0:off 1:off 2:off 3:off 4:off 5:off 6:off
dhcpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
dhcrelay 0:off 1:off 2:off 3:off 4:off 5:off 6:off
drbd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
earlykbd 0:off 1:off 2:off 3:off 4:off 5:on 6:off
earlysyslog 0:off 1:off 2:off 3:off 4:off 5:on 6:off
esound 0:off 1:off 2:off 3:off 4:off 5:off 6:off
evms 0:off 1:off 2:off 3:off 4:off 5:off 6:off
fam 0:off 1:off 2:off 3:off 4:off 5:off 6:off
fbset 0:off 1:off 2:off 3:off 4:off 5:off 6:off
gpm 0:off 1:off 2:off 3:off 4:off 5:off 6:off
gssd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
haldaemon 0:off 1:off 2:off 3:on 4:off 5:on 6:off
hang-handler 0:off 1:off 2:off 3:on 4:off 5:on 6:off
heartbeat 0:off 1:off 2:off 3:off 4:off 5:off 6:off
idmapd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
ipmi 0:off 1:off 2:off 3:off 4:off 5:off 6:off
ipvsadm 0:off 1:off 2:off 3:off 4:off 5:off 6:off
ipxmount 0:off 1:off 2:off 3:off 4:off 5:off 6:off
irq_balancer 0:off 1:on 2:on 3:on 4:off 5:on 6:off
joystick 0:off 1:off 2:off 3:off 4:off 5:off 6:off
kbd 0:off 1:on 2:on 3:on 4:off 5:on 6:off S:on
kdump 0:off 1:on 2:on 3:on 4:off 5:on 6:off
ldirectord 0:off 1:off 2:off 3:off 4:off 5:off 6:off
libvirtd 0:off 1:off 2:off 3:on 4:off 5:on 6:off
lm_sensors 0:off 1:off 2:off 3:off 4:off 5:off 6:off
mdadmd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
microcode 0:off 1:on 2:on 3:on 4:off 5:on 6:off S:on
multipathd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
named 0:off 1:off 2:off 3:off 4:off 5:off 6:off
nbclient 0:off 1:off 2:on 3:on 4:off 5:on 6:off
network 0:off 1:off 2:on 3:on 4:off 5:on 6:off
nfs 0:off 1:off 2:off 3:off 4:off 5:off 6:off
nfsboot 0:off 1:off 2:off 3:off 4:off 5:off 6:off
nfsserver 0:off 1:off 2:off 3:off 4:off 5:off 6:off
nmb 0:off 1:off 2:off 3:off 4:off 5:off 6:off
novell-zmd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
nscd 0:off 1:off 2:off 3:on 4:off 5:on 6:off
ntp 0:off 1:off 2:on 3:on 4:off 5:on 6:off
o2cb 0:off 1:off 2:on 3:on 4:off 5:on 6:off
ocfs2 0:off 1:off 2:on 3:on 4:off 5:on 6:off
openct 0:off 1:off 2:off 3:off 4:off 5:off 6:off
openhpid 0:off 1:off 2:off 3:off 4:off 5:off 6:off
pcscd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
portmap 0:off 1:off 2:off 3:off 4:off 5:off 6:off
postfix 0:off 1:off 2:off 3:off 4:off 5:off 6:off
powerd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
powersaved 0:off 1:off 2:on 3:on 4:off 5:on 6:off
random 0:off 1:off 2:on 3:on 4:off 5:on 6:off
raw 0:off 1:off 2:on 3:on 4:off 5:on 6:off
resmgr 0:off 1:off 2:on 3:on 4:off 5:on 6:off
rpasswdd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
rpmconfigcheck 0:off 1:off 2:off 3:off 4:off 5:off 6:off
rsyncd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
running-kernel 0:off 1:off 2:on 3:on 4:off 5:on 6:off
saslauthd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
skeleton.compat 0:off 1:off 2:off 3:off 4:off 5:off 6:off
slpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
smartd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
smb 0:off 1:off 2:off 3:off 4:off 5:off 6:off
smbfs 0:off 1:off 2:off 3:on 4:off 5:on 6:off
smpppd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
snmpd 0:off 1:off 2:off 3:on 4:off 5:on 6:off
splash 0:off 1:on 2:on 3:on 4:off 5:on 6:off S:on
splash_early 0:off 1:off 2:on 3:on 4:off 5:on 6:off
sshd 0:off 1:off 2:off 3:on 4:off 5:on 6:off
suseRegister 0:off 1:off 2:off 3:off 4:off 5:off 6:off
svcgssd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
syslog 0:off 1:off 2:on 3:on 4:off 5:on 6:off
sysstat 0:off 1:off 2:off 3:off 4:off 5:off 6:off
winbind 0:off 1:off 2:off 3:off 4:off 5:off 6:off
xdm 0:off 1:off 2:off 3:off 4:off 5:on 6:off
xend 0:off 1:off 2:off 3:on 4:off 5:on 6:off
xendomains 0:off 1:of
f 2:off 3:on 4:off 5:on 6:off
xfs 0:off 1:off 2:off 3:off 4:off 5:off 6:off
xinetd 0:off 1:off 2:off 3:on 4:off 5:on 6:off
ypbind 0:off 1:off 2:off 3:off 4:off 5:off 6:off
xinetd based services:
bpcd: on
bpjava-msvc: on
chargen: off
chargen-udp: off
cvs: off
daytime: off
daytime-udp: off
echo: off
echo-udp: off
fam: off
netstat: off
rexec: off
rlogin: off
rsh: off
rstatd: on
rsync: off
servers: off
services: off
swat: off
systat: off
telnet: off
tftp: off
time: off
time-udp: off
vnc: off
vnetd: on
vopied: on

Restart portmap and xinetd if necessary

server:/var/log # service portmap status
Checking for RPC portmap daemon:                                      unused

server:/var/log # service portmap start
Starting RPC portmap daemon                                           done

server:/var/log # /etc/init.d/xinetd restart
Shutting down xinetd:                                                 done
Starting INET services. (xinetd)                                      done

Jan D.
Jan D.

"The only real security that a man will have in this world is a reserve of knowledge, experience, and ability."

Articles: 673