As title.
when I run a nmap localhost I see that port 199 is open for the smux service.

smux is not present at any runlevel...
the strange things is that it seems that this port has been opened by some service
I use since I never opened it and some months ago with the same server configuration
I haven't got it opened.

I'm thinking that some service opened it after some updates,
any idea?

As root, "netstat -anp | grep -w 199" - should tell you what program is listening

(/etc/services says it's an SNMP port)

_________________
Rgds
Stephen
(Linux user since kernel version 0.11)

thanks for the answer.

that command output this:

tcp        0      0 127.0.0.1:199               0.0.0.0:*                   LISTEN      2049/snmpd

thanks.

So process PID 2049 (name "snmpd") is listening on port 199. It's only listening on localhost, so no one external to your machine will see it.

_________________
Rgds

Stephen

(Linux user since kernel version 0.11)

It's only when it starts talking back that you need to worry.

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.

I disabled it so problem solved

I was quite stupid, I uses the smux port for cacti...
after reenabling it the cacti "restarted" working ok but now the graph relative to
"Disk IO Bytes" shows a plain line, no error on graph but it does not log the activity of the disk.

Any idea? Stopping a service and than renabling it should not broke any configuration in cacti.
Thanks,

this is the graph:
https://docs.google.com/open?id=0B1dE59 ... 2ZBcHFYRHc