# /etc/services: # $Id: services,v 1.17 2001/02/28 20:11:31 notting Exp $ # # Network services, Internet style # # Note that it is presently the policy of IANA to assign a single well-known # port number for both TCP and UDP; hence, most entries here have two entries # even if the protocol doesn't support UDP operations. # Updated from RFC 1700, ``Assigned Numbers'' (October 1994). Not all ports # are included, only the more common ones. # # The latest IANA port assignments can be gotten from # http://www.isi.edu/in-notes/iana/assignments/port-numbers # The Well Known Ports are those from 0 through 1023. # The Registered Ports are those from 1024 through 49151 # The Dynamic and/or Private Ports are those from 49152 through 65535 # # Each line describes one service, and is of the form: # # service-name port/protocol [aliases ...] [# comment] tcpmux 1/tcp # TCP port service multiplexer tcpmux 1/udp # TCP port service multiplexer rje 5/tcp # Remote Job Entry rje 5/udp # Remote Job Entry echo 7/tcp echo 7/udp discard 9/tcp sink null discard 9/udp sink null systat 11/tcp users systat 11/udp users daytime 13/tcp daytime 13/udp qotd 17/tcp quote qotd 17/udp quote msp 18/tcp # message send protocol msp 18/udp # message send protocol chargen 19/tcp ttytst source chargen 19/udp ttytst source ftp-data 20/tcp ftp-data 20/udp ftp 21/tcp ftp 21/udp ssh 22/tcp # SSH Remote Login Protocol ssh 22/udp # SSH Remote Login Protocol telnet 23/tcp telnet 23/udp # 24 - private mail system smtp 25/tcp mail smtp 25/udp mail time 37/tcp timserver time 37/udp timserver rlp 39/tcp resource # resource location rlp 39/udp resource # resource location nameserver 42/tcp name # IEN 116 nameserver 42/udp name # IEN 116 nicname 43/tcp whois nicname 43/udp whois tacacs 49/tcp # Login Host Protocol (TACACS) tacacs 49/udp # Login Host Protocol (TACACS) re-mail-ck 50/tcp # Remote Mail Checking Protocol re-mail-ck 50/udp # Remote Mail Checking Protocol domain 53/tcp nameserver # name-domain server domain 53/udp nameserver whois++ 63/tcp whois++ 63/udp bootps 67/tcp # BOOTP server bootps 67/udp bootpc 68/tcp # BOOTP client bootpc 68/udp tftp 69/tcp tftp 69/udp gopher 70/tcp # Internet Gopher gopher 70/udp netrjs-1 71/tcp # Remote Job Service netrjs-1 71/udp # Remote Job Service netrjs-2 72/tcp # Remote Job Service netrjs-2 72/udp # Remote Job Service netrjs-3 73/tcp # Remote Job Service netrjs-3 73/udp # Remote Job Service netrjs-4 74/tcp # Remote Job Service netrjs-4 74/udp # Remote Job Service finger 79/tcp finger 79/udp http 80/tcp www www-http # WorldWideWeb HTTP http 80/udp www www-http # HyperText Transfer Protocol kerberos 88/tcp kerberos5 krb5 # Kerberos v5 kerberos 88/udp kerberos5 krb5 # Kerberos v5 supdup 95/tcp supdup 95/udp hostname 101/tcp hostnames # usually from sri-nic hostname 101/udp hostnames # usually from sri-nic iso-tsap 102/tcp tsap # part of ISODE. csnet-ns 105/tcp cso # also used by CSO name server csnet-ns 105/udp cso # unfortunately the poppassd (Eudora) uses a port which has already # been assigned to a different service. We list the poppassd as an # alias here. This should work for programs asking for this service. # (due to a bug in inetd the 3com-tsmux line is disabled) #3com-tsmux 106/tcp poppassd #3com-tsmux 106/udp poppassd rtelnet 107/tcp # Remote Telnet rtelnet 107/udp pop2 109/tcp pop-2 postoffice # POP version 2 pop2 109/udp pop-2 pop3 110/tcp pop-3 # POP version 3 pop3 110/udp pop-3 sunrpc 111/tcp portmapper # RPC 4.0 portmapper TCP sunrpc 111/udp portmapper # RPC 4.0 portmapper UDP auth 113/tcp authentication tap ident auth 113/udp authentication tap ident sftp 115/tcp sftp 115/udp uucp-path 117/tcp uucp-path 117/udp nntp 119/tcp readnews untp # USENET News Transfer Protocol nntp 119/udp readnews untp # USENET News Transfer Protocol ntp 123/tcp ntp 123/udp # Network Time Protocol netbios-ns 137/tcp # NETBIOS Name Service netbios-ns 137/udp netbios-dgm 138/tcp # NETBIOS Datagram Service netbios-dgm 138/udp netbios-ssn 139/tcp # NETBIOS session service netbios-ssn 139/udp imap 143/tcp imap2 # Interim Mail Access Proto v2 imap 143/udp imap2 snmp 161/tcp # Simple Net Mgmt Proto snmp 161/udp # Simple Net Mgmt Proto snmptrap 162/udp snmp-trap # Traps for SNMP cmip-man 163/tcp # ISO mgmt over IP (CMOT) cmip-man 163/udp cmip-agent 164/tcp cmip-agent 164/udp mailq 174/tcp # MAILQ mailq 174/udp # MAILQ xdmcp 177/tcp # X Display Mgr. Control Proto xdmcp 177/udp nextstep 178/tcp NeXTStep NextStep # NeXTStep window nextstep 178/udp NeXTStep NextStep # server bgp 179/tcp # Border Gateway Proto. bgp 179/udp prospero 191/tcp # Cliff Neuman's Prospero prospero 191/udp irc 194/tcp # Internet Relay Chat irc 194/udp smux 199/tcp # SNMP Unix Multiplexer smux 199/udp at-rtmp 201/tcp # AppleTalk routing at-rtmp 201/udp at-nbp 202/tcp # AppleTalk name binding at-nbp 202/udp at-echo 204/tcp # AppleTalk echo at-echo 204/udp at-zis 206/tcp # AppleTalk zone information at-zis 206/udp qmtp 209/tcp # Quick Mail Transfer Protocol qmtp 209/udp # Quick Mail Transfer Protocol z39.50 210/tcp z3950 wais # NISO Z39.50 database z39.50 210/udp z3950 wais ipx 213/tcp # IPX ipx 213/udp imap3 220/tcp # Interactive Mail Access imap3 220/udp # Protocol v3 link 245/tcp ttylink link 245/udp ttylink rsvp_tunnel 363/tcp rsvp_tunnel 363/udp rpc2portmap 369/tcp rpc2portmap 369/udp # Coda portmapper codaauth2 370/tcp codaauth2 370/udp # Coda authentication server ulistproc 372/tcp ulistserv # UNIX Listserv ulistproc 372/udp ulistserv ldap 389/tcp ldap 389/udp svrloc 427/tcp # Server Location Protocl svrloc 427/udp # Server Location Protocl mobileip-agent 434/tcp mobileip-agent 434/udp mobilip-mn 435/tcp mobilip-mn 435/udp https 443/tcp # MCom https 443/udp # MCom snpp 444/tcp # Simple Network Paging Protocol snpp 444/udp # Simple Network Paging Protocol microsoft-ds 445/tcp microsoft-ds 445/udp kpasswd 464/tcp kpwd # Kerberos "passwd" kpasswd 464/udp kpwd # Kerberos "passwd" photuris 468/tcp photuris 468/udp saft 487/tcp # Simple Asynchronous File Transfer saft 487/udp # Simple Asynchronous File Transfer gss-http 488/tcp gss-http 488/udp pim-rp-disc 496/tcp pim-rp-disc 496/udp isakmp 500/tcp isakmp 500/udp gdomap 538/tcp # GNUstep distributed objects gdomap 538/udp # GNUstep distributed objects iiop 535/tcp iiop 535/udp dhcpv6-client 546/tcp dhcpv6-client 546/udp dhcpv6-server 547/tcp dhcpv6-server 547/udp rtsp 554/tcp # Real Time Stream Control Protocol rtsp 554/udp # Real Time Stream Control Protocol nntps 563/tcp # NNTP over SSL nntps 563/udp # NNTP over SSL whoami 565/tcp whoami 565/udp submission 587/tcp msa # mail message submission submission 587/udp msa # mail message submission npmp-local 610/tcp dqs313_qmaster # npmp-local / DQS npmp-local 610/udp dqs313_qmaster # npmp-local / DQS npmp-gui 611/tcp dqs313_execd # npmp-gui / DQS npmp-gui 611/udp dqs313_execd # npmp-gui / DQS hmmp-ind 612/tcp dqs313_intercell # HMMP Indication / DQS hmmp-ind 612/udp dqs313_intercell # HMMP Indication / DQS ldaps 636/tcp # LDAP over SSL ldaps 636/udp # LDAP over SSL acap 674/tcp acap 674/udp ha-cluster 694/tcp # Heartbeat HA-cluster ha-cluster 694/udp # Heartbeat HA-cluster kerberos-adm 749/tcp # Kerberos `kadmin' (v5) kerberos-iv 750/udp kerberos4 kerberos-sec kdc kerberos-iv 750/tcp kerberos4 kerberos-sec kdc webster 765/tcp # Network dictionary webster 765/udp phonebook 767/tcp # Network phonebook phonebook 767/udp rsync 873/tcp # rsync rsync 873/udp # rsync telnets 992/tcp telnets 992/udp imaps 993/tcp # IMAP over SSL imaps 993/udp # IMAP over SSL ircs 994/tcp ircs 994/udp pop3s 995/tcp # POP-3 over SSL pop3s 995/udp # POP-3 over SSL # # UNIX specific services # exec 512/tcp biff 512/udp comsat login 513/tcp who 513/udp whod shell 514/tcp cmd # no passwords used syslog 514/udp printer 515/tcp spooler # line printer spooler printer 515/udp spooler # line printer spooler talk 517/udp ntalk 518/udp utime 519/tcp unixtime utime 519/udp unixtime efs 520/tcp router 520/udp route routed # RIP ripng 521/tcp ripng 521/udp timed 525/tcp timeserver timed 525/udp timeserver tempo 526/tcp newdate courier 530/tcp rpc conference 531/tcp chat netnews 532/tcp readnews netwall 533/udp # -for emergency broadcasts uucp 540/tcp uucpd # uucp daemon klogin 543/tcp # Kerberized `rlogin' (v5) kshell 544/tcp krcmd # Kerberized `rsh' (v5) afpovertcp 548/tcp # AFP over TCP afpovertcp 548/udp # AFP over TCP remotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem # # From ``PORT NUMBERS'': # #>REGISTERED PORT NUMBERS #> #>The Registered Ports are listed by the IANA and on most systems can be #>used by ordinary user processes or programs executed by ordinary #>users. #> #>Ports are used in the TCP [RFC793] to name the ends of logical #>connections which carry long term conversations. For the purpose of #>providing services to unknown callers, a service contact port is #>defined. This list specifies the port used by the server process as #>its contact port. #> #>The IANA registers uses of these ports as a convienence to the #>community. # socks 1080/tcp # socks proxy server socks 1080/udp # socks proxy server skkserv 1178/tcp # SKK Japanese input method h323hostcallsc 1300/tcp # H323 Host Call Secure h323hostcallsc 1300/udp # H323 Host Call Secure ms-sql-s 1433/tcp # Microsoft-SQL-Server ms-sql-s 1433/udp # Microsoft-SQL-Server ms-sql-m 1434/tcp # Microsoft-SQL-Monitor ms-sql-m 1434/udp # Microsoft-SQL-Monitor ica 1494/tcp # Citrix ICA Client ica 1494/udp # Citrix ICA Client wins 1512/tcp # Microsoft's Windows Internet Name Service wins 1512/udp # Microsoft's Windows Internet Name Service ingreslock 1524/tcp ingreslock 1524/udp prospero-np 1525/tcp # Prospero non-privileged prospero-np 1525/udp support 1529/tcp prmsd gnatsd # cygnus bug tracker datametrics 1645/tcp old-radius # datametrics / old radius entry datametrics 1645/udp old-radius # datametrics / old radius entry sa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry sa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry kermit 1649/tcp kermit 1649/udp l2tp 1701/tcp l2tp 1701/udp h323gatedisc 1718/tcp h323gatedisc 1718/udp h323gatestat 1719/tcp h323gatestat 1719/udp h323hostcall 1720/tcp h323hostcall 1720/udp tftp-mcast 1758/tcp tftp-mcast 1758/udp hello 1788/tcp hello 1788/udp radius 1812/tcp # Radius radius 1812/udp # Radius radius-acct 1813/tcp radacct # Radius Accounting radius-acct 1813/udp radacct # Radius Accounting mtp 1911/tcp # mtp 1911/udp # hsrp 1985/tcp # Cisco Hot Standby Router Protocol hsrp 1985/udp # Cisco Hot Standby Router Protocol licensedaemon 1986/tcp licensedaemon 1986/udp gdp-port 1997/tcp # Cisco Gateway Discovery Protocol gdp-port 1997/udp # Cisco Gateway Discovery Protocol nfs 2049/tcp nfsd nfs 2049/udp nfsd zephyr-srv 2102/tcp # Zephyr server zephyr-srv 2102/udp # Zephyr server zephyr-clt 2103/tcp # Zephyr serv-hm connection zephyr-clt 2103/udp # Zephyr serv-hm connection zephyr-hm 2104/tcp # Zephyr hostmanager zephyr-hm 2104/udp # Zephyr hostmanager cvspserver 2401/tcp # CVS client/server operations cvspserver 2401/udp # CVS client/server operations venus 2430/tcp # codacon port venus 2430/udp # Venus callback/wbc interface venus-se 2431/tcp # tcp side effects venus-se 2431/udp # udp sftp side effect codasrv 2432/tcp # not used codasrv 2432/udp # server port codasrv-se 2433/tcp # tcp side effects codasrv-se 2433/udp # udp sftp side effect corbaloc 2809/tcp # CORBA naming service locator icpv2 3130/tcp # Internet Cache Protocol V2 (Squid) icpv2 3130/udp # Internet Cache Protocol V2 (Squid) mysql 3306/tcp # MySQL mysql 3306/udp # MySQL trnsprntproxy 3346/tcp # Trnsprnt Proxy trnsprntproxy 3346/udp # Trnsprnt Proxy prsvp 3455/tcp # RSVP Port prsvp 3455/udp # RSVP Port rwhois 4321/tcp # Remote Who Is rwhois 4321/udp # Remote Who Is krb524 4444/tcp # Kerberos 5 to 4 ticket xlator krb524 4444/udp # Kerberos 5 to 4 ticket xlator rfe 5002/tcp # Radio Free Ethernet rfe 5002/udp # Actually uses UDP only cfengine 5308/tcp # CFengine cfengine 5308/udp # CFengine cvsup 5999/tcp CVSup # CVSup file transfer/John Polstra/FreeBSD cvsup 5999/udp CVSup # CVSup file transfer/John Polstra/FreeBSD x11 6000/tcp X # the X Window System afs3-fileserver 7000/tcp # file server itself afs3-fileserver 7000/udp # file server itself afs3-callback 7001/tcp # callbacks to cache managers afs3-callback 7001/udp # callbacks to cache managers afs3-prserver 7002/tcp # users & groups database afs3-prserver 7002/udp # users & groups database afs3-vlserver 7003/tcp # volume location database afs3-vlserver 7003/udp # volume location database afs3-kaserver 7004/tcp # AFS/Kerberos authentication service afs3-kaserver 7004/udp # AFS/Kerberos authentication service afs3-volser 7005/tcp # volume managment server afs3-volser 7005/udp # volume managment server afs3-errors 7006/tcp # error interpretation service afs3-errors 7006/udp # error interpretation service afs3-bos 7007/tcp # basic overseer process afs3-bos 7007/udp # basic overseer process afs3-update 7008/tcp # server-to-server updater afs3-update 7008/udp # server-to-server updater afs3-rmtsys 7009/tcp # remote cache manager service afs3-rmtsys 7009/udp # remote cache manager service sd 9876/tcp # Session Director sd 9876/udp # Session Director amanda 10080/tcp # amanda backup services amanda 10080/udp # amanda backup services h323callsigalt 11720/tcp # H323 Call Signal Alternate h323callsigalt 11720/udp # H323 Call Signal Alternate quake 26000/tcp quake 26000/udp wnn6-ds 26208/tcp wnn6-ds 26208/udp #traceroute 33434/tcp traceroute 33434/udp # # Datagram Delivery Protocol services # rtmp 1/ddp # Routing Table Maintenance Protocol nbp 2/ddp # Name Binding Protocol echo 4/ddp # AppleTalk Echo Protocol zip 6/ddp # Zone Information Protocol # # Kerberos (Project Athena/MIT) services # Note that these are for Kerberos v4, and are unofficial. Sites running # v4 should uncomment these and comment out the v5 entries above. # kerberos_master 751/udp # Kerberos authentication kerberos_master 751/tcp # Kerberos authentication passwd_server 752/udp # Kerberos passwd server krbupdate 760/tcp kreg # Kerberos registration kpop 1109/tcp # Pop with Kerberos knetd 2053/tcp # Kerberos de-multiplexor # # Kerberos 5 services, also not registered with IANA # krb5_prop 754/tcp # Kerberos slave propagation eklogin 2105/tcp # Kerberos encrypted rlogin # # Unofficial but necessary (for NetBSD) services # supfilesrv 871/tcp # SUP server supfiledbg 1127/tcp # SUP debugging # # Unofficial but useful/necessary other services # netstat 15/tcp # (was once asssigned, no more) fsp 21/udp fspd # linuxconf 98/tcp # Linuxconf HTML access poppassd 106/tcp # Eudora poppassd 106/udp # Eudora smtps 465/tcp # SMTP over SSL (TLS) gii 616/tcp # gated interactive interface omirr 808/tcp omirrd # online mirror omirr 808/udp omirrd # online mirror swat 901/tcp # Samba Web Administration Tool rmtcfg 1236/tcp # Gracilis Packeten remote config server xtel 1313/tcp # french minitel support 1529/tcp # GNATS cfinger 2003/tcp # GNU Finger ninstall 2150/tcp # ninstall service ninstall 2150/udp # ninstall service afbackup 2988/tcp # Afbackup system afbackup 2988/udp # Afbackup system squid 3128/tcp # squid web proxy postgres 5432/tcp # POSTGRES postgres 5432/udp # POSTGRES fax 4557/tcp # FAX transmission service (old) hylafax 4559/tcp # HylaFAX client-server protocol (new) sgi-dgl 5232/tcp # SGI Distributed Graphics sgi-dgl 5232/udp noclog 5354/tcp # noclogd with TCP (nocol) noclog 5354/udp # noclogd with UDP (nocol) hostmon 5355/tcp # hostmon uses TCP (nocol) hostmon 5355/udp # hostmon uses TCP (nocol) ircd 6667/tcp # Internet Relay Chat ircd 6667/udp # Internet Relay Chat xfs 7100/tcp # X font server tircproxy 7666/tcp # Tircproxy http-alt 8008/tcp http-alt 8008/udp webcache 8080/tcp # WWW caching service webcache 8080/udp # WWW caching service tproxy 8081/tcp # Transparent Proxy tproxy 8081/udp # Transparent Proxy jetdirect 9100/tcp laserjet hplj mandelspawn 9359/udp mandelbrot # network mandelbrot kamanda 10081/tcp # amanda backup services (Kerberos) kamanda 10081/udp # amanda backup services (Kerberos) amandaidx 10082/tcp # amanda backup services amidxtape 10083/tcp # amanda backup services isdnlog 20011/tcp # isdn logging system isdnlog 20011/udp # isdn logging system vboxd 20012/tcp # voice box system vboxd 20012/udp # voice box system binkp 24554/tcp # Binkley binkp 24554/udp # Binkley #asp 27374###/tcp # Address Search Protocol #asp 27374###/udp # Address Search Protocol tfido 60177/tcp # Ifmail tfido 60177/udp # Ifmail fido 60179/tcp # Ifmail fido 60179/udp # Ifmail ####################### Local services ###################################### #Ordered local ports netstat 15/tcp fsp 21/udp fspd PCAnywhere 22/udp ssh # PCAnywhere and SSH Remote Login Protocol # 26 - unassigned specter 28/tcp # http://www.specter.com mtp 57/tcp # deprecated rje 77/tcp netrjs transproxy 81/tcp # http://www.transproxy.nlc.net.au/ link 87/tcp ttylink linuxconf 98/tcp # 100 - reserved x400 103/tcp # ISO Mail x400-snd 104/tcp NeWS 144/tcp news # Window System mailq 174/tcp # Mailer transport queue for Zmailer mailq 174/udp # Mailer transport queue for Zmailer BM-vpn 213/tcp # Novell Border Manager VPN Master/Slave (IPX/TCP) (http://www.novell.com/documentation/lg/bordr/docui/index.html) ssh-trojan 227/tcp # http://www.incidents.org/diary/diary.php?id=96 BM-vpn-auth 353/tcp # Novell Border Manager VPN Client Authentication (http://www.novell.com/documentation/lg/bordr/docui/index.html) BM-vpn-keep-alive 353/udp # Novell Border Manager VPN Keep-Alive (http://www.novell.com/documentation/lg/bordr/docui/index.html) dtk 365/tcp # Deception ToolKit http://www.all.net/dtk/ dtk 365/udp # Deception ToolKit (may not be actively used) http://www.all.net/dtk/ securecast1 370/udp # Outgoing packets to NAI's servers, http://www.nai.com/asp_set/anti_virus/alerts/faq.asp securecast2 371/udp # Incoming packets from NAI's servers, http://www.nai.com/asp_set/anti_virus/alerts/faq.asp directconnect 412/tcp # Peer-to-peer file sharing, http://www.neo-modus.com/?page=Help directconnect 412/udp # Peer-to-peer file sharing, http://www.neo-modus.com/?page=Help ssmtp 465/tcp # SMTP over SSL isakmp 500/tcp # IPSec (control channel?), is tcp even used? isakmp 500/udp # IPSec (control channel?) efs 520/tcp # for LucasFilm route 520/udp router routed # RIP netware-sap 524/tcp # Not sure of the name gdomap 538/tcp # GNUstep distributed objects gdomap 538/udp # GNUstep distributed objects klogin 543/tcp # Kerberized `rlogin' (v5) kshell 544/tcp krcmd # Kerberized `rsh' (v5) new-rwho 550/udp new-who # experimental realaudvid0 554/tcp # RealAudio control port, http://service.real.com/firewall/ rmonitor 560/udp rmonitord # experimental monitor 561/udp # experimental snews 563/tcp # NNTP over SSL pcserver 600/tcp # ECD Integrated PC board srvr mount 635/tcp # NFS Mount Service mount 635/udp # NFS Mount Service ssl-ldap 636/tcp # LDAP over SSL pcnfs 640/udp # PC-NFS DOS Authentication bwnfs 650/udp # BW-NFS DOS Authentication tinc 655/tcp TINC # http://tinc.nl.linux.org/ , VPN daemon tinc 655/udp TINC # Ivo Timmermans kerberos-adm 749/tcp # Kerberos `kadmin' (v5) kerberos-adm 749/udp # Kerberos 5 admin/changepw kerberos-iv 750/udp kerberos4 kerberos-sec kdc # Kerberos authentication (server) udp kerberos-iv 750/tcp kerberos4 kerberos-sec kdc # Kerberos authentication (server) tcp krb_prop 754/tcp krb5_prop # Kerberos slave propagation kpasswd 761/tcp kpwd # Kerberos "passwd" webster 765/tcp # Network dictionary webster 765/udp remoteposs 799/tcp # Remotely Possible #amd uses udp port 800 and talks to 1023 over lo over all IP addresses #amd uses udp port 1023 and talks to 800 over lo over all IP addresses StarScheduler 801/tcp # Star office internal web server rsync 873/tcp # rsync rsync 873/udp # rsync swat 901/tcp # Samba Web Administration Tool sgi_fam 933/udp # File monitoring tool, http://oss.sgi.com/projects/fam/ simap 993/tcp # IMAP over SSL spop3 995/tcp # POP-3 over SSL imaps 993/tcp # IMAP over SSL pop3s 995/tcp # POP-3 over SSL listen 1025/tcp listener RFS remote_file_sharing nterm 1026/tcp remote_login network_terminal ddt 1052/tcp # http://ddt.sourceforge.net . Dynamic DNS client and server ddt 1052/udp # http://ddt.sourceforge.net . Dynamic DNS client and server freeveracity 1062/tcp # http://freeveracity.org socks 1080/tcp # socks proxy server socks 1080/udp # socks proxy server oracle-proxy 1100/tcp #http://otn.oracle.com/deploy/security/pdf/webcache.pdf oracle-proxy-admin 4000/tcp #http://otn.oracle.com/deploy/security/pdf/webcache.pdf oracle-proxy-xml 4001/tcp #http://otn.oracle.com/deploy/security/pdf/webcache.pdf oracle-proxy-stats 4002/tcp #http://otn.oracle.com/deploy/security/pdf/webcache.pdf msql 1114/tcp groove-dpp 1211/udp # http://www.groove.net kazaa 1214/tcp # http://www.kazaa.com subsevenv1 1243/tcp notes 1352/tcp # Lotus Notes mssql 1433/tcp mssql 1433/udp ms-sna-base 1478/udp # ms-sna-base iphonewboard 1490/tcp # Internet Phone whiteboard/conferencing citrix 1494/tcp # http://www.citrix.com/support/solution/sol00053.htm sybase-sql 1498/udp # Sybase's dbclient port? sqllistener 1521/tcp listener # Oracle SQL Listener ingreslock 1524/tcp orasrv 1525/tcp oracle # more oracle tcptlisrv 1557/tcp # more oracle StreamWorksXDMA 1558/udp tnet 1600/tcp # transputer net daemon citrix-discover 1604/udp # http://www.citrix.com/support/solution/sol00053.htm pptp 1723/tcp # pptp control channel netshow 1755/tcp ms-streaming radacct 1813/tcp # Radius Accounting radacct 1813/udp # Radius Accounting ssdpsrv 1900/udp # Advertises Universal plug and play devices via soap. Also 5000/tcp. http://support.microsoft.com/support/kb/articles/Q262/4/58.ASP and http://www.sans.org/infosecFAQ/homeoffice/investigation.htm BM-auth-web 1959/tcp # Border Manager authentication web server bigbrother 1984/tcp # What other port could it possibly be? http://maclawran.ca/bb-dnld/ #Openwindows uses tcp port(s?) 2000 (and up?) (2000-2003) cfinger 2003/tcp # GNU finger nfs 2049/udp nfsd # NFS File Service nfs 2049/tcp # NFS File Service rc5 2056/tcp # Distributed processing rc5des 2064/tcp # New distributed processing speakfree 2074/udp speakfree2 2075/udp speakfree-reg 2076/tcp zephyr-srv 2102/udp # Zephyr server zephyr-clt 2103/udp # Zephyr serv-hm connection zephyr-hm 2104/udp # Zephyr hostmanager intermezzo 2222/tcp # http://www.inter-mezzo.org cpq-wbem 2301/tcp compaqdiag # compaq http Compaq remote diagnostic/management cpq-wbem 2301/udp compaqdiag # compaq http Compaq remote diagnostic/management cvs 2401/tcp # http://www.cyclic.com bnc-pedro 2424/tcp # irc proxy, used by pedro http://gotbnc.com venus 2430/tcp # codacon port venus 2430/udp # Venus callback/wbc interface venus-se 2431/tcp # tcp side effects venus-se 2431/udp # udp sftp side effect codasrv 2432/tcp # not used codasrv 2432/udp # server port codasrv-se 2433/tcp # tcp side effects codasrv-se 2433/udp # udp sftp side effect netrek-game 2592/tcp razor 2702/tcp # http://razor.sourceforge.net/ ntop 3000/tcp # Ntop's embedded web server for output: http://www.ntop.org/ cfs 3049/udp # Cryptographic File System (CFS) interbase 3050/tcp # http://www.borland.com/interbase/ , http://firebird.sourceforge.net squid 3128/tcp # squid web proxy squid-icp 3130/udp icp 3130/tcp # Internet Cache Protocol (Squid) icp 3130/udp # Internet Cache Protocol (Squid) mysql 3306/tcp squid-snmp 3401/udp netrek-dir 3521/tcp netrek # http://www.netrek.org kerbaux1 3939/udp # Used by Cablevision as part of their Kerberos auth kerbaux2 3940/udp # Used by Cablevision as part of their Kerberos auth diablo2-battlenet 4000/tcp icq 4000/tcp # ICQ http://www.icq.com/firewall . tcp appears to be used as well. icq 4000/udp # ICQ http://www.icq.com/firewall . udp more common. pcpmon 4321/tcp # http://oss.sgi.com/projects/pcp/ , http://k332.feld.cvut.cz/~lemming/projects/pcpmon.html smupsd 4321/udp smartups # APCC SmartUPS monitor (too obscure?) krb524 4444/tcp # Kerberos 5 to 4 ticket xlator fax 4557/tcp # Old Flexfax client-server protocol hylafax 4559/tcp # HylaFAX client-server protocol asd 4711/tcp # Advanced sound daemon, http://asd.sourceforge.net/ squid-htcp 4827/udp # Inter-cache communications, http://www.squid-cache.org/ ssdpsrv 5000/tcp # Advertises Universal plug and play devices via soap. Also 1900/udp. http://support.microsoft.com/support/kb/articles/Q262/4/58.ASP and http://www.sans.org/infosecFAQ/homeoffice/investigation.htm esd-old 5001/tcp # Enlightened sound daemon prob tcp only. http://www.tux.org/~ricdude/dbdocs/running_esound.html and running_esound96.html esd-old 5001/udp # Enlightened sound daemon. http://www.tux.org/~ricdude/dbdocs/running_esound.html and running_esound96.html linphone-sip 5060/udp # http://simon.morlat.free.fr/english/linphone.html linphone-sipomatic 5064/udp # http://simon.morlat.free.fr/english/linphone.html aolaim 5190/tcp jabber 5222/tcp # http://www.jabber.org, aol aim/icq-type software replacement umleth 5299/tcp # http://user-mode-linux.sourceforge.net postgresql 5432/tcp postgresql 5432/udp remoteshelltrojan 5503/udp # http://www.incidents.org/archives/intrusions/msg01661.html and http://www.qualys.com/form_remoteshell.html pcawdata 5631 tcp/udp? # PC Anywhere, http://www.symantec.com pcawstatus 5632 tcp/udp? # PC Anywhere, http://www.symantec.com gnutella5634 5634/tcp #vnc's java client uses 5800 and up #vnc uses tcp ports 5900 and up (corresponding to the xserver). #xwindows uses (tcp? probably) ports 6000 and up (6000-6003) X 6000/tcp # X-Window System diablo2 6112/tcp # http://www.diablo2.com, http://www.battle.net diablo2 6112/udp # Uses tcp and udp gnutella 6346/tcp gnutella6347 6347/tcp gnutella6348 6348/tcp gnutella6349 6349/tcp gnutella6350 6350/tcp gnutella6355 6355/tcp irc 6667/tcp # Internet Relay Chat iphonesrv 6670/tcp # Internet phone servers napster6688 6688/tcp napster6697 6697/tcp napster 6699/tcp # mp3 sharing http://www.napster.com napster6700 6700/tcp videumpz 6860/tcp # videum pan and zoom controls vdolive 7000/tcp dos msdos bbs # BBS service linphone-data 7000/udp # http://simon.morlat.free.fr/english/linphone.html realaudvid1 7070/tcp # http://service.real.com/firewall/ realaudvid2 7071/tcp # http://service.real.com/firewall/ xfs 7100/tcp # X Font Server unreal 7778/udp # Unreal tournament #Novell's border manager uses tcp port 8080 for it's cache software (licensed squid) freenet-web 8081/tcp # Freenet web interface http://freenet.sourceforge.net cnn-search 8765/tcp # Search service at search.cnn.com opennap 8888/tcp sendmail-switch-admin 8890/tcp # http://www.sendmail.com nap8899 8899/tcp nap2 # Napster webct 8900/tcp # web-based flexible learning sendmail-switch-sdap 9000/tcp bnc # http://www.sendmail.com, also irc proxy http://gotbnc.com laserjet 9100/tcp hplj # port for incoming print jobs timsweb 9109/tcp printer1 9200/udp # Some printer connection - see Dave aolaim2 9898/tcp webmin 10000/tcp # Web based administration for multiple Unixes. http://www.webmin.com/webmin/ amanda 10080/udp # amanda backup services pgpkeyserver 11371/tcp # http://pgp.mit.edu, http://keys.pgp.com:11371/ hitboxstats 12343/tcp # Connection to stats.hitbox.com netbus1 12345/tcp # NT Trojan horse netbus2 12346/tcp # NT Trojan horse bindshell 12497/tcp # Default port for lrk5 bindshell trojan gamespy-ping 13139/udp # http://www.gamespyarcade.com/software/support/firewalls.shtml tripplite 13851/tcp bitkeeper 14690/tcp # http://www.bitmover.com, pretty sure it's tcp. esd 16001/tcp # Enlightened sound daemon prob tcp only. http://www.tux.org/~ricdude/dbdocs/running_esound.html and running_esound96.html freenet 19114/tcp # Freenet web interface http://freenet.sourceforge.net whackjob2 20043/tcp iphoneaud 22555/udp # Internet Phone audio data (client and server port) iphoneaddr 25793/tcp # Internet Phone addressing server halflife-server 27010/tcp halflife-server 27010/udp halflife-game 27015/tcp halflife-game 27015/udp # udp too? subsevenv-ramen 27374/tcp gamespy-heartbeat 27900/tcp # http://www.gamespyarcade.com/software/support/firewalls.shtml (also 28900, 29900, 29901, 6500/udp, 6500/tcp) quake2server 27910/udp #Quake 2 Server hackatac 28431/udp # http://www.hack-a-tac.com , http://www.sans.org/y2k/062300-1430.htm msgaming 28800/udp # http://support.microsoft.com/support/kb/articles/Q159/0/31.ASP http://www.zone.com ms-zone1 28801/tcp ms-zone2 28822/tcp nthack 29292/tcp # Not sure tcp/udp nthack 29292/udp # Not sure tcp/udp backorifice 31337/udp # NT Trojan horse mon 32777/tcp # http://www.kernel.org/software/mon/ esound 35091 udp? tcp? # Enlightenment sound daemon http://www.tux.org/~ricdude/dbdocs/miscellaneous108.html linkproof 37852/tcp # Proximity check algorithm starteam 40901/tcp arcserve 41524/udp #arcserve's discovery protocol? freedom-0 51100/tcp # http://www.freedom.net/support/help.html?js=0&r=%2Fsupport%2Fbug.html&topic=port freedom-0 51100/udp # http://www.freedom.net/support/help.html?js=0&r=%2Fsupport%2Fbug.html&topic=port freedom-1 51101/udp # http://www.freedom.net/support/help.html?js=0&r=%2Fsupport%2Fbug.html&topic=port freedom-2 51102/tcp # http://www.freedom.net/support/help.html?js=0&r=%2Fsupport%2Fbug.html&topic=port freedom-7 51107/tcp # http://www.freedom.net/support/help.html?js=0&r=%2Fsupport%2Fbug.html&topic=port freedom-9 51109/udp # http://www.freedom.net/support/help.html?js=0&r=%2Fsupport%2Fbug.html&topic=port paplus 63333/tcp # http://www.tripplite.com/software/ftp/linux.txt #ddp rtmp 1/ddp # Routing Table Maintenance Protocol nbp 2/ddp # Name Binding Protocol echo 4/ddp # AppleTalk Echo Protocol zip 6/ddp # Zone Information Protocol zebrasrv 2600/tcp # zebra service zebra 2601/tcp # zebra vty ripd 2602/tcp # RIPd vty ripngd 2603/tcp # RIPngd vty ospfd 2604/tcp # OSPFd vty bgpd 2605/tcp # BGPd vty ospf6d 2606/tcp # OSPF6d vty