LSI MegaRAID – Exacq

To make the most efficient use of drive capacity, it is advisable to use drives of the same capacity. This is because the capacity of each drive is limited to the capacity of the smallest drive in the unit. Fault Tolerance:

RAID Type	Description
RAID 5	This type of unit provides performance, fault tolerance, and high storage efficiency. RAID 5 units can tolerate one drive failing before losing data.
RAID 6	Provides very high fault tolerance with the ability to protect against two consecutive drive failures. Performance and efficiency increase with higher numbers of drives.

Possible Configurations Based on Number of Drives.

# Drives	Possible RAID Configurations
3	RAID 5
4	RAID 5
5 or more	RAID 5RAID 6

The total array capacity is defined as follows: Drive Capacity

RAID Level	Capacity
RAID 5	(number of Drives – 1) x (capacity of smallest drive)Storage Efficiency Increases with the number of disks:Storage efficiency = (number of drives -1) / (number of drives)
RAID 6	(number of drives -2) x (capacity of smallest drive)

Example 1 3 2TB HDDs RAID 5 Capacity = (3-1) x 2 = 4TB RAID 6 Capacity = N/A requires 4 or higher total HDDs Example 2 4 2TB and 1 4TB HDDs RAID 5 Capacity = (5-1) x 2 = 8TB RAID 6 Capacity = (5-2) x 2 =6TB Auto-Carving Note: If the capacity of the unit you create will exceed 2TB and you are using Windows 2000, Windows XP, Linux 2.4, or FreeBSD 4.x, you will need to enable auto-carving.
Auto-carving divides the available arrays capacity into multiple chunks of 2 TB volumes that can be addressed by the operating systems as separate volumes. Then, when you boot to the operating system, each volume appears as a different disk drive.

Symptom:

Vulnerability scans may detect and indicate that port 3071 is Open/Listening because of the installed LSI MegaRAID Storage Management software (LSI MSM) on an Ubuntu Linux server that does not have hardware support for RAID configuration. IF IT IS NOT BEING USED, the software may be removed to eliminate this vulnerability.

The following Ubuntu Linux commands may be used to confirm this condition.

admin@ER1234567890:~$sudo netstat –lntup

Display excerpt…

Active Internet connections (only servers)
Proto Recv-Q      Send-Q      Local Address     Foreign Address   State PID/Program name
Tcp   0     0     0.0.0.0:3071      0.0.0.0:*         LISTEN      1311/java
Udp   0     0     0.0.0.0:3071      0.0.0.0:*               1595/java

admin@ER1234567890:~$ sudo lsof -i -P -n

Display excerpt…

COMMAND     PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
java       1595   root   20u IPv4   11857      0t0 UDP *:3071
java       1595   root   24u IPv4   12538      0t0 TCP *:3071 (LISTEN)

Requirement(s):

Physical or remote access to the exacqVision Server with a “full admin” role.

Resolution:

NOTE: For the purposes of the following instructions. Left-click is defined as and will be used to “select an item” and Right-click is defined as and used to “display additional options that apply to the item.” This is typical of a mouse configured for a “right-handed” operator.

Figure 1. The Ubuntu exacqVision Desktop displays the LSI MSM icon.

A variant of the previously mentioned netstat terminal command provides a concise way to check.

admin@ER1234567890:~$ sudo netstat –lntup | grep –i 3701

Left-click on “Applications” on the top menu of the Desktop.
Left-click on “System Tools” from the dropdown menu.
Left-click on “Terminal” from the following menu.

Figure 2. Using Terminal to check for port 3071 in LISTEN mode.

Figure 3. Steps 1-3.

Left-click on “Applications” on the top menu of the Desktop.
Left-click on “System Tools” from the dropdown menu.
Left-click on “Smart Package Manager” from the following menu.

Figure 4. Steps 4-6.

Left-click in the search box (with the magnifying glass) and type “megaraid” and the “Package list” should be reduced to just the “megaraid-storage-manager.”
Left-click on the “megaraid-storage-manager” line item
Left-click on the “Remove” selection.

Figure 5. Steps 7-10.

Left-click on “File” from the pull-down menu.
Left-click on the “Execute Changes…” from the following menu.
Left-click on the “OK” button.
Wait for the “Operation Progress” popup window to appear and indicate “100%”. Close the “Smart Package Manager.”

Figure 6. Use Terminal to verify the port is no longer open.

admin@ER1234567890:~$ sudo netstat –lntup | grep –i 3701

A blank reply means that it is no longer active.

Figure 7. Steps 11 & 12.

Right-click on “LSI MSM” icon on the Desktop.
Left-click on “Delete” from the popup window.
Done.