'netstat' doesn't check for sockets using SCTP protocol

[Tomasz Jankowski]

Binary package hint: net-tools

'netstat' doesn't display information about listening SCTP sockets. I checked it twice. First time with my own applications and second time server - client examples provided with SCTP implementation for Linux. When server is listening command 'neststat -l' doesn't display any information about it.

[Zerthurd (zerthurd)]

netstat from net-tools-1.60_p20071202044231-r1 not support SCTP

If I run SCTP-listener on some port, I cannot see it via netstat -lp

# netstat --sctp
netstat: unrecognized option `--sctp'

[Zerthurd (zerthurd)]

change severity to major

[Jeroen Roovers (jer-gentoo)]

Changed Severity back to Enhancement - this looks like a missing feature that requires a patch that should probably be introduced upstream, not in Gentoo. So far, only Fedora appears to support an SCTP patch for net-tools - maybe that's worth looking into.

[Jeroen Roovers (jer-gentoo)]

upstream bug report

[Daniël van Eeden (dveeden)]

Related: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=306428

[Mike Frysinger (vapier)]

ive updated the patch in the Debian tracker and added with 1.60_p20090728014017

[Erik Inge Bolsø (knan-lp)]

This seems a security issue to me - you can have a backdoor listening on SCTP and it won't show in netstat. And even established connections - like a file transfer or shell.

Red Hat & SuSE have had SCTP patches in their netstat flavors for years. And the debian bug has patches. What's the holdup?

Simple tests:

netsend sctp receive (opens a listening socket on port 6666)
socat SCTP-LISTEN:8080 TCP-CONNECT:localhost:22 (proxies ssh on sctp/8080)

[Ken Sharp (kennybobs)]

Upstream git is patched to support SCTP but it hasn't made it into Debian yet.

[Ken Sharp (kennybobs)]

Bug trackers doesn't seem to like https://sourceforge.net/p/net-tools/bugs/21/

Once that's fixed, Debian should be ready to update their package.