[lug] meaning of logwatch message

John Hernandez John.Hernandez at noaa.gov
Wed Jul 24 16:35:01 MDT 2002

  sgi_fam: A Silicon Graphics daemon that is an RPC server that tracks 
changes to the filesystem

On default Redhat systems, it binds to the loopback interface only, 
meaning that it cannot be remotely accessed (hence, from=

If desired, you should be able to disable it in /etc/xinetd.d/sgi_fam 
and then send SIGHUP to xinetd.

You can use 'netstat -pan' or 'lsof -i' to see a listing of inet 
sockets (along with the process ID associated with each socket).

Michael J. Hammel wrote:
> Anyone know what this line in my secure log means:
> secure:Jul 23 21:52:38 brahe xinetd[933]: START: sgi_fam pid=1721 from=
> The pid changes with each entry.  They showed up today for the first time.
> Is this someone pinging my machine or was I running something I didn't know
> I was running?  What is "sgi_fam"?  It's not in /etc/services.
> BTW, I'm running RH 7.2 (KRUD 2002-04-01) with updates.


   - John Hernandez - Network Engineer - 303-497-6392 -
  |  National Oceanic and Atmospheric Administration   |
  |  Mailstop R/OM62. 325 Broadway, Boulder, CO 80305  |

More information about the LUG mailing list