bettercap 1.3.6 → 1.3.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a07e86570365f443ee439d850b72ce33ea9f9496
-  data.tar.gz: f29023f45a2b8f77100096529539fee383b2d0ca
+  metadata.gz: 48a0d8e69cf95056c2e4d9e12b36a55b074da94b
+  data.tar.gz: 849f6961e569a94299e0cf6f69ac825a8d4df2fa
 SHA512:
-  metadata.gz: 28f7271d87b8cb7727ef4f2ddff8ff0ceef18d692271dd6dafc0a6aced5d84aeb595161692bbc05b9a0dd96df681b6ee352cba24edac29ba31a32ee0ca53adb3
-  data.tar.gz: 1db150ee30cd6baf75f3b19bc51ca4d860888c95e9686ed0a2e496b4db976e1177553de38f756a8d376269b22e8dd182eb6dc5f13f92dc849917e394ecd751ac
+  metadata.gz: d040cd73c42769b985ec53ea197bcb6d580567fe87654ad40b3593d7761818c34bf2e42582f58686fe466ccdd6154742c6966f454e688b1e6a5db1e11b2d4a99
+  data.tar.gz: ce9367914282abe8c0b48a5bec0216c4dc7481ab4eab249be69eea2c7069473a1a1ab6da4b73b8eb39b95f95905e1ddacf2b4bdf38c8feef899724685b4d6dc1

data/lib/bettercap.rb

@@ -27,63 +27,27 @@ require 'uri'
 Object.send :remove_const, :Config rescue nil
 Config = RbConfig
 
-require 'bettercap/update_checker'
-require 'bettercap/error'
-require 'bettercap/loader'
-require 'bettercap/options'
-require 'bettercap/network/arp_reader'
-require 'bettercap/network/packet_queue'
-require 'bettercap/discovery/thread'
-require 'bettercap/discovery/agents/base'
-require 'bettercap/discovery/agents/arp'
-require 'bettercap/discovery/agents/icmp'
-require 'bettercap/discovery/agents/udp'
-require 'bettercap/context'
-require 'bettercap/monkey/packetfu/utils'
-require 'bettercap/spoofers/base'
-require 'bettercap/spoofers/arp'
-require 'bettercap/spoofers/icmp'
-require 'bettercap/spoofers/none'
-require 'bettercap/logger'
-require 'bettercap/shell'
-require 'bettercap/network/network'
-require 'bettercap/version'
-require 'bettercap/network/target'
-require 'bettercap/network/protos/base'
-require 'bettercap/network/protos/dhcp'
-require 'bettercap/sniffer/sniffer'
-require "bettercap/sniffer/parsers/base"
-require "bettercap/sniffer/parsers/custom"
-require "bettercap/sniffer/parsers/dict"
-require "bettercap/sniffer/parsers/cookie"
-require "bettercap/sniffer/parsers/ftp"
-require "bettercap/sniffer/parsers/httpauth"
-require "bettercap/sniffer/parsers/https"
-require "bettercap/sniffer/parsers/irc"
-require "bettercap/sniffer/parsers/mail"
-require "bettercap/sniffer/parsers/mpd"
-require "bettercap/sniffer/parsers/nntp"
-require "bettercap/sniffer/parsers/ntlmss"
-require "bettercap/sniffer/parsers/post"
-require "bettercap/sniffer/parsers/dhcp"
-require "bettercap/sniffer/parsers/redis"
-require "bettercap/sniffer/parsers/rlogin"
-require "bettercap/sniffer/parsers/snpp"
-require "bettercap/sniffer/parsers/url"
-require "bettercap/sniffer/parsers/whatsapp"
-require 'bettercap/firewalls/redirection'
-require 'bettercap/firewalls/osx'
-require 'bettercap/firewalls/linux'
-require 'bettercap/proxy/stream_logger'
-require 'bettercap/proxy/request'
-require 'bettercap/proxy/response'
-require 'bettercap/proxy/thread_pool'
-require 'bettercap/proxy/sslstrip/cookiemonitor'
-require 'bettercap/proxy/sslstrip/urlmonitor'
-require 'bettercap/proxy/sslstrip/strip'
-require 'bettercap/proxy/proxy'
-require 'bettercap/proxy/streamer'
-require 'bettercap/proxy/module'
-require 'bettercap/proxy/certstore'
-require 'bettercap/network/servers/httpd'
-require 'bettercap/network/servers/dnsd'
+def autoload( path = '' )
+  dir = File.dirname(__FILE__) + "/bettercap/#{path}"
+  deps = []
+  files = []
+  Dir[dir+"**/*.rb"].each do |filename|
+    filename = filename.gsub( dir, '' ).gsub('.rb', '')
+    filename = "bettercap/#{path}#{filename}"
+    # Proxy modules must be loaded at runtime.
+    unless filename =~ /.+\/inject[a-z]+$/i
+      if filename.end_with?('/base')
+        deps << filename
+      else
+        files << filename
+      end
+    end
+  end
+
+  ( deps + files ).each do |file|
+    require file
+  end
+
+end
+
+autoload

data/lib/bettercap/discovery/agents/base.rb

@@ -26,19 +26,25 @@ class Base
     net = ip = @ifconfig[:ip4_obj]
     # loop each ip in our subnet and push it to the queue
     while net.include?ip
-      # rescanning the gateway could cause an issue when the
-      # gateway itself has multiple interfaces ( LAN, WAN ... )
-      if ip != ctx.gateway and ip != @local_ip
-        packet = get_probe(ip)
-        @ctx.packets.push(packet)
+      unless skip_address?(ip)
+        @ctx.packets.push( get_probe(ip) )
       end
-
       ip = ip.succ
     end
   end
 
   private
 
+  # Return true if +ip+ must be skipped during discovery, otherwise false.
+  def skip_address?(ip)
+    # don't send probes to the gateway
+    ( ip == @ctx.gateway or \
+      # don't send probes to our device
+      ip == @local_ip or \
+      # don't stress endpoints we already discovered
+      !@ctx.find_target( ip.to_s, nil ).nil? )
+  end
+
   # Each Discovery::Agent::Base derived class should implement this method.
   def get_probe( ip )
     Logger.warn "#{self.class.name}#get_probe not implemented!"

data/lib/bettercap/network/protos/base.rb

@@ -19,20 +19,25 @@ class Base
   TYPES = [
       :uint8,
       :uint16,
+      :uint24,
       :uint32,
       :uint32rev,
       :ip,
       :mac,
-      :bytes
+      :bytes,
+      :string,
+      :stringz
   ].freeze
 
-  @@fields = {}
-
   def self.method_missing(method_name, *arguments, &block)
     type = method_name.to_sym
     name = arguments[0]
     if TYPES.include?(type)
-      @@fields[name] = { :type => type, :opts => arguments.length > 1 ? arguments[1] : {} }
+      unless self.class_variables.include?(:@@fields)
+        class_eval "@@fields = {}"
+      end
+
+      class_eval "@@fields[:#{name}] = { :type => :#{type}, :opts => #{arguments.length > 1 ? arguments[1] : {}} }"
       class_eval "attr_accessor :#{name}"
     else
       raise NoMethodError, method_name
@@ -47,48 +52,105 @@ class Base
       limit  = data.length
       value  = nil
 
-      @@fields.each do |name, info|
+      self.class_variable_get(:@@fields).each do |name, info|
         value = nil
 
         case info[:type]
         when :uint8
           value = data[offset].ord
           offset += 1
+
         when :uint16
           value = data[offset..offset + 1].unpack('S')[0]
           offset += 2
+
+        when :uint24
+          value = data[offset..offset + 2].unpack('S')[0]
+          offset += 3
+
         when :uint32
           value = data[offset..offset + 3].unpack('L')[0]
           offset += 4
+
         when :uint32rev
           value = data[offset..offset + 3].reverse.unpack('L')[0]
           offset += 4
+
         when :ip
           tmp   = data[offset..offset + 3].reverse.unpack('L')[0]
           value = IPAddr.new(tmp, Socket::AF_INET)
           offset += 4
+
         when :mac
           tmp   = data[offset..offset + 7]
           value = tmp.bytes.map(&(Proc.new {|x| sprintf('%02X',x) })).join(':')
-          offset += size( info, 16 )
+          offset += size( info, pkt, 16 )
+
         when :bytes
-          size = size( info, data.length )
+          size = size( info, pkt, data.length )
+          offset = offset( info, pkt, offset  )
+
           value = data[offset..offset + size - 1].bytes
           offset += size
+
+        when :string
+          size = size( info, pkt, data.length )
+          offset = offset( info, pkt, offset  )
+
+          value = data[offset..offset + size - 1].bytes.pack('c*')
+          if info[:opts].has_key?(:check)
+            if value != info[:opts][:check].force_encoding('ASCII-8BIT')
+              raise "Unexpected value '#{value}', expected '#{info[:opts][:check]}' ."
+            end
+          end
+          offset += size
+
+        when :stringz
+          value = ""
+          loop do
+            value += data[offset]
+            offset += 1
+            break if data[offset].ord == 0x00
+          end
+          offset += 1
+
         end
 
         pkt.send("#{name}=", value)
       end
 
     rescue Exception => e
+      #puts e.message
+      #puts e.backtrace.join("\n")
       pkt = nil
     end
 
     pkt
   end
 
-  def self.size( info, default )
-    info[:opts].has_key?(:size) ? info[:opts][:size] : default
+  def self.size( info, pkt, default )
+    if info[:opts].has_key?(:size)
+      if info[:opts][:size].is_a?(Integer)
+        return info[:opts][:size]
+      else
+        n = pkt.send( info[:opts][:size] )
+        return n
+      end
+    else
+      return default
+    end
+  end
+
+  def self.offset( info, pkt, default )
+    if info[:opts].has_key?(:offset)
+      if info[:opts][:offset].is_a?(Integer)
+        return info[:opts][:offset]
+      else
+        return default + pkt.send( info[:opts][:offset] )
+      end
+    else
+      return default
+    end
   end
 end
 

data/lib/bettercap/network/protos/dhcp.rb

@@ -338,10 +338,6 @@ class Packet < Network::Protos::Base
       end
     end
   end
-
-  def transaction_id
-    sprintf( "0x%X", @xid )
-  end
 end
 
 end

data/lib/bettercap/network/protos/mysql.rb

@@ -0,0 +1,40 @@
+# encoding: UTF-8
+=begin
+
+BETTERCAP
+
+Author : Simone 'evilsocket' Margaritelli
+Email  : evilsocket@gmail.com
+Blog   : http://www.evilsocket.net/
+
+This project is released under the GPL 3 license.
+
+=end
+
+module BetterCap
+module Network
+module Protos
+module MySQL
+
+class Packet < Network::Protos::Base
+  uint24  :packet_length
+  uint8   :packet_number
+  uint16  :client_capabilities
+  uint16  :ext_client_capabilities
+  uint32  :max_packet
+  uint8   :charset
+  string  :padding, :size => 23, :check => "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
+  stringz :username
+
+  uint8   :plen
+  bytes   :password, :size => :plen
+
+  def is_auth?
+    @packet_number == 1 and !@username.nil? and @ext_client_capabilities != 0 and @plen > 0
+  end
+end
+
+end
+end
+end
+end

data/lib/bettercap/network/protos/ntlm.rb

@@ -0,0 +1,97 @@
+# encoding: UTF-8
+=begin
+
+BETTERCAP
+
+Author : Simone 'evilsocket' Margaritelli
+Email  : evilsocket@gmail.com
+Blog   : http://www.evilsocket.net/
+
+This project is released under the GPL 3 license.
+
+=end
+
+module BetterCap
+module Network
+module Protos
+module NTLM
+
+# https://msdn.microsoft.com/en-us/library/ee441774.aspx
+# https://developer.gnome.org/evolution-exchange/stable/ximian-connector-ntlm.html
+class Packet < Network::Protos::Base
+  uint8  :netbios_message_type
+  bytes  :netbios_length, :size => 3
+
+  string :smb_protocol, :size => 4, :check => "\xFFSMB"
+  uint8  :smb_command
+  uint32 :smb_status
+  uint8  :smb_flags
+  uint16 :smb_flags2
+  uint16 :smb_pid_high
+  bytes  :smb_signature, :size => 8
+  uint16 :smb_reserved
+  uint16 :smb_tid
+  uint16 :smb_pid_low
+  uint16 :smb_uid
+  uint16 :smb_mid
+
+  uint8  :word_count
+  uint8  :and_x_command
+  uint8  :reserved
+  uint16 :and_x_offset
+  uint16 :max_buffer
+  uint16 :max_mpx_count
+  uint16 :vc_number
+  uint32 :session_key
+  uint16 :security_blob_length
+  uint32 :reserved_2
+  uint32 :capabilities
+  uint16 :byte_count
+
+  bytes  :dummy, :size => 12
+
+  string :protocol, :size => 8, :check => "NTLMSSP\x00"
+  uint32 :type
+
+  uint16 :lm_resp_len
+  uint16 :lm_resp_max_len
+  uint32 :lm_resp_off
+
+  uint16 :nt_resp_len
+  uint16 :nt_resp_max_len
+  uint32 :nt_resp_off
+
+  uint16 :dom_resp_len
+  uint16 :dom_resp_max_len
+  uint32 :dom_resp_off
+
+  uint16 :user_resp_len
+  uint16 :user_resp_max_len
+  uint32 :user_resp_off
+
+  uint16 :host_resp_len
+  uint16 :host_resp_max_len
+  uint32 :host_resp_off
+
+  uint16 :session_resp_len
+  uint16 :session_resp_max_len
+  uint32 :session_resp_off
+
+  uint32 :flags
+
+  bytes  :lm_response,      :size => :lm_resp_len
+  bytes  :ntlm_response,    :size => :nt_resp_len
+  string :domain_name,      :size => :dom_resp_len
+  string :user_name,        :size => :user_resp_len
+  string :host_name,        :size => :host_resp_len
+  bytes  :session_key_resp, :size => :session_resp_len
+
+  def is_auth?
+    self.type == 0x03 #NTLMSSP_AUTH
+  end
+end
+
+end
+end
+end
+end

data/lib/bettercap/network/services

@@ -0,0 +1,2182 @@
+tcpmux            1/tcp      # TCP Port Service Multiplexer [rfc-1078]
+tcpmux            1/udp      # TCP Port Service Multiplexer
+compressnet       2/tcp      # Management Utility
+compressnet       2/udp      # Management Utility
+compressnet       3/tcp      # Compression Process
+compressnet       3/udp      # Compression Process
+rje               5/tcp      # Remote Job Entry
+rje               5/udp      # Remote Job Entry
+echo              7/tcp      #
+echo              7/udp      #
+discard           9/tcp      # sink null
+discard           9/udp      # sink null
+systat            11/tcp     # Active Users
+systat            11/udp     # Active Users
+daytime           13/tcp     #
+daytime           13/udp     #
+netstat           15/tcp     #
+qotd              17/tcp     # Quote of the Day
+qotd              17/udp     # Quote of the Day
+msp               18/tcp     # Message Send Protocol
+msp               18/udp     # Message Send Protocol
+chargen           19/tcp     # ttytst source Character Generator
+chargen           19/udp     # ttytst source Character Generator
+ftp-data          20/tcp     # File Transfer [Default Data]
+ftp-data          20/udp     # File Transfer [Default Data]
+ftp               21/tcp     # File Transfer [Control]
+ftp               21/udp     # File Transfer [Control]
+ssh               22/tcp     # Secure Shell Login
+ssh               22/udp     # Secure Shell Login
+telnet            23/tcp     #
+telnet            23/udp     #
+priv-mail         24/tcp     # any private mail system
+priv-mail         24/udp     # any private mail system
+smtp              25/tcp     # Simple Mail Transfer
+smtp              25/udp     # Simple Mail Transfer
+nsw-fe            27/tcp     # NSW User System FE
+nsw-fe            27/udp     # NSW User System FE
+msg-icp           29/tcp     # MSG ICP
+msg-icp           29/udp     # MSG ICP
+msg-auth          31/tcp     # MSG Authentication
+msg-auth          31/udp     # MSG Authentication
+dsp               33/tcp     # Display Support Protocol
+dsp               33/udp     # Display Support Protocol
+priv-print        35/tcp     # any private printer server
+priv-print        35/udp     # any private printer server
+time              37/tcp     # timserver
+time              37/udp     # timserver
+rap               38/tcp     # Route Access Protocol
+rap               38/udp     # Route Access Protocol
+rlp               39/tcp     # Resource Location Protocol
+rlp               39/udp     # Resource Location Protocol
+graphics          41/tcp     #
+graphics          41/udp     #
+nameserver        42/tcp     # Host Name Server
+nameserver        42/udp     # Host Name Server
+whois             43/tcp     # nicname
+shois             43/udp     # nicname
+mpm-flags         44/tcp     # MPM FLAGS Protocol
+mpm-flags         44/udp     # MPM FLAGS Protocol
+mpm               45/tcp     # Message Processing Module [recv]
+mpm               45/udp     # Message Processing Module [recv]
+mpm-snd           46/tcp     # MPM [default send]
+mpm-snd           46/udp     # MPM [default send]
+ni-ftp            47/tcp     # NI FTP
+ni-ftp            47/udp     # NI FTP
+auditd            48/tcp     # Digital Audit Daemon
+auditd            48/udp     # Digital Audit Daemon
+tacacs            49/tcp     # Login Host Protocol (TACACS)
+tacacs            49/udp     # Login Host Protocol (TACACS)
+re-mail-ck        50/tcp     # Remote Mail Checking Protocol
+re-mail-ck        50/udp     # Remote Mail Checking Protocol
+la-maint          51/tcp     # IMP Logical Address Maintenance
+la-maint          51/udp     # IMP Logical Address Maintenance
+xns-time          52/tcp     # XNS Time Protocol
+xns-time          52/udp     # XNS Time Protocol
+domain            53/tcp     # Domain Name Server
+domain            53/udp     # Domain Name Server
+xns-ch            54/tcp     # XNS Clearinghouse
+xns-ch            54/udp     # XNS Clearinghouse
+isi-gl            55/tcp     # ISI Graphics Language
+isi-gl            55/udp     # ISI Graphics Language
+xns-auth          56/tcp     # XNS Authentication
+xns-auth          56/udp     # XNS Authentication
+priv-term         57/tcp     # any private terminal access
+priv-term         57/udp     # any private terminal access
+xns-mail          58/tcp     # XNS Mail
+xns-mail          58/udp     # XNS Mail
+priv-file         59/tcp     # any private file service
+priv-file         59/udp     # any private file service
+ni-mail           61/tcp     # NI MAIL
+ni-mail           61/udp     # NI MAIL
+acas              62/tcp     # ACA Services
+acas              62/udp     # ACA Services
+via-ftp           63/tcp     # VIA Systems - FTP & whois++
+via-ftp           63/udp     # VIA Systems - FTP & whois++
+covia             64/tcp     # Communications Integrator (CI)
+covia             64/udp     # Communications Integrator (CI)
+tacacs-ds         65/tcp     # TACACS-Database Service
+tacacs-ds         65/udp     # TACACS-Database Service
+sql*net           66/tcp     # Oracle SQL*NET
+sql*net           66/udp     # Oracle SQL*NET
+dhcpserver        67/tcp     # DHCP/Bootstrap Protocol Server
+dhcpserver        67/udp     # DHCP/Bootstrap Protocol Server
+dhcpclient        68/tcp     # DHCP/Bootstrap Protocol Client
+dhcpclient        68/udp     # DHCP/Bootstrap Protocol Client
+tftp              69/tcp     # Trivial File Transfer
+tftp              69/udp     # Trivial File Transfer
+gopher            70/tcp     #
+gopher            70/udp     #
+netrjs-1          71/tcp     # Remote Job Service
+netrjs-1          71/udp     # Remote Job Service
+netrjs-2          72/tcp     # Remote Job Service
+netrjs-2          72/udp     # Remote Job Service
+netrjs-3          73/tcp     # Remote Job Service
+netrjs-3          73/udp     # Remote Job Service
+netrjs-4          74/tcp     # Remote Job Service
+netrjs-4          74/udp     # Remote Job Service
+priv-dial         75/tcp     # any private dial out service
+priv-dial         75/udp     # any private dial out service
+deos              76/tcp     # Distributed External Object Store
+deos              76/udp     # Distributed External Object Store
+priv-rje          77/tcp     # any private RJE service, netrjs
+priv-rje          77/udp     # any private RJE service, netjrs
+vettcp            78/tcp     #
+vettcp            78/udp     #
+finger            79/tcp     #
+finger            79/udp     #
+http              80/tcp     # World Wide Web HTTP
+http              80/udp     # World Wide Web HTTP
+hosts2-ns         81/tcp     # HOSTS2 Name Server
+hosts2-ns         81/udp     # HOSTS2 Name Server
+xfer              82/tcp     # XFER Utility
+xfer              82/udp     # XFER Utility
+mit-ml-dev        83/tcp     # MIT ML Device
+mit-ml-dev        83/udp     # MIT ML Device
+ctf               84/tcp     # Common Trace Facility
+ctf               84/udp     # Common Trace Facility
+mit-ml-dev        85/tcp     # MIT ML Device
+mit-ml-dev        85/udp     # MIT ML Device
+mfcobol           86/tcp     # Micro Focus Cobol
+mfcobol           86/udp     # Micro Focus Cobol
+priv-term-l       87/tcp     # any private terminal link, ttylink
+kerberos-sec      88/tcp     # Kerberos (v5)
+kerberos-sec      88/udp     # Kerberos (v5)
+su-mit-tg         89/tcp     # SU/MIT Telnet Gateway
+su-mit-tg         89/udp     # SU/MIT Telnet Gateway
+dnsix             90/tcp     # DNSIX Securit Attribute Token Map
+dnsix             90/udp     # DNSIX Securit Attribute Token Map
+mit-dov           91/tcp     # MIT Dover Spooler
+mit-dov           91/udp     # MIT Dover Spooler
+npp               92/tcp     # Network Printing Protocol
+npp               92/udp     # Network Printing Protocol
+dcp               93/tcp     # Device Control Protocol
+dcp               93/udp     # Device Control Protocol
+objcall           94/tcp     # Tivoli Object Dispatcher
+objcall           94/udp     # Tivoli Object Dispatcher
+supdup            95/tcp     # BSD supdupd(8)
+supdup            95/udp     #
+dixie             96/tcp     # DIXIE Protocol Specification
+dixie             96/udp     # DIXIE Protocol Specification
+swift-rvf         97/tcp     # Swift Remote Virtural File Protocol
+swift-rvf         97/udp     # Swift Remote Virtural File Protocol
+linuxconf         98/tcp     # linuxconf
+tacnews           98/udp     # TAC News
+metagram          99/tcp     # Metagram Relay
+metagram          99/udp     # Metagram Relay
+newacct           100/tcp    # [unauthorized use]
+hostname          101/tcp    # hostnames NIC Host Name Server
+hostname          101/udp    # hostnames NIC Host Name Server
+iso-tsap          102/tcp    # tsap ISO-TSAP Class 0
+iso-tsap          102/udp    # tsap ISO-TSAP Class 0
+gppitnp           103/tcp    # Genesis Point-to-Point Trans Net, or x400 ISO Email
+gppitnp           103/udp    # Genesis Point-to-Point Trans Net
+acr-nema          104/tcp    # ACR-NEMA Digital Imag. & Comm. 300
+acr-nema          104/udp    # ACR-NEMA Digital Imag. & Comm. 300
+csnet-ns          105/tcp    # Mailbox Name Nameserver
+csnet-ns          105/udp    # Mailbox Name Nameserver
+pop3pw            106/tcp    # Eudora compatible PW changer
+3com-tsmux        106/udp    #
+rtelnet           107/tcp    # Remote Telnet
+rtelnet           107/udp    # Remote Telnet Service
+snagas            108/tcp    # SNA Gateway Access Server
+snagas            108/udp    # SNA Gateway Access Server
+pop-2             109/tcp    # PostOffice V.2
+pop-2             109/udp    # PostOffice V.2
+pop-3             110/tcp    # PostOffice V.3
+pop-3             110/udp    # PostOffice V.3
+sunrpc            111/tcp    # portmapper, rpcbind
+sunrpc            111/udp    # portmapper, rpcbind
+mcidas            112/tcp    # McIDAS Data Transmission Protocol
+mcidas            112/udp    # McIDAS Data Transmission Protocol
+auth              113/tcp    # ident, tap, Authentication Service
+auth              113/udp    # ident, tap, Authentication Service
+audionews         114/tcp    # Audio News Multicast
+audionews         114/udp    # Audio News Multicast
+sftp              115/tcp    # Simple File Transfer Protocol
+sftp              115/udp    # Simple File Transfer Protocol
+ansanotify        116/tcp    # ANSA REX Notify
+ansanotify        116/udp    # ANSA REX Notify
+uucp-path         117/tcp    # UUCP Path Service
+uucp-path         117/udp    # UUCP Path Service
+sqlserv           118/tcp    # SQL Services
+sqlserv           118/udp    # SQL Services
+nntp              119/tcp    # Network News Transfer Protocol
+nntp              119/udp    # Network News Transfer Protocol
+cfdptkt           120/tcp    #
+cfdptkt           120/udp    #
+erpc              121/tcp    # Encore Expedited Remote Pro.Call
+erpc              121/udp    # Encore Expedited Remote Pro.Call
+smakynet          122/tcp    #
+smakynet          122/udp    #
+ntp               123/tcp    # Network Time Protocol
+ntp               123/udp    # Network Time Protocol
+ansatrader        124/tcp    # ANSA REX Trader
+ansatrader        124/udp    # ANSA REX Trader
+locus-map         125/tcp    # Locus PC-Interface Net Map Ser
+locus-map         125/udp    # Locus PC-Interface Net Map Ser
+unitary           126/tcp    # Unisys Unitary Login
+unitary           126/udp    # Unisys Unitary Login
+locus-con         127/tcp    # Locus PC-Interface Conn Server
+locus-con         127/udp    # Locus PC-Interface Conn Server
+gss-xlicen        128/tcp    # GSS X License Verification
+gss-xlicen        128/udp    # GSS X License Verification
+pwdgen            129/tcp    # Password Generator Protocol
+pwdgen            129/udp    # Password Generator Protocol
+cisco-fna         130/tcp    # cisco FNATIVE
+cisco-fna         130/udp    # cisco FNATIVE
+cisco-tna         131/tcp    # cisco TNATIVE
+cisco-tna         131/udp    # cisco TNATIVE
+cisco-sys         132/tcp    # cisco SYSMAINT
+cisco-sys         132/udp    # cisco SYSMAINT
+statsrv           133/tcp    # Statistics Service
+statsrv           133/udp    # Statistics Service
+ingres-net        134/tcp    # INGRES-NET Service
+ingres-net        134/udp    # INGRES-NET Service
+loc-srv           135/tcp    # NCS local location broker
+loc-srv           135/udp    # Location Service
+profile           136/tcp    # PROFILE Naming System
+profile           136/udp    # PROFILE Naming System
+netbios-ns        137/tcp    # NETBIOS Name Service
+netbios-ns        137/udp    # NETBIOS Name Service
+netbios-dgm       138/tcp    # NETBIOS Datagram Service
+netbios-dgm       138/udp    # NETBIOS Datagram Service
+netbios-ssn       139/tcp    # NETBIOS Session Service
+netbios-ssn       139/udp    # NETBIOS Session Service
+emfis-data        140/tcp    # EMFIS Data Service
+emfis-data        140/udp    # EMFIS Data Service
+emfis-cntl        141/tcp    # EMFIS Control Service
+emfis-cntl        141/udp    # EMFIS Control Service
+bl-idm            142/tcp    # Britton-Lee IDM
+bl-idm            142/udp    # Britton-Lee IDM
+imap2             143/tcp    # Interim Mail Access Protocol v2
+imap2             143/udp    # Interim Mail Access Protocol v2
+news              144/tcp    # NewS window system
+news              144/udp    # NewS window system
+uaac              145/tcp    # UAAC Protocol
+uaac              145/udp    # UAAC Protocol
+iso-tp0           146/tcp    #
+iso-tp0           146/udp    #
+iso-ip            147/tcp    #
+iso-ip            147/udp    #
+cronus            148/tcp    # CRONUS-SUPPORT
+cronus            148/udp    # CRONUS-SUPPORT
+aed-512           149/tcp    # AED 512 Emulation Service
+aed-512           149/udp    # AED 512 Emulation Service
+sql-net           150/tcp    #
+sql-net           150/udp    #
+hems              151/tcp    #
+hems              151/udp    #
+bftp              152/tcp    # Background File Transfer Program
+bftp              152/udp    # Background File Transfer Program
+sgmp              153/tcp    #
+sgmp              153/udp    #
+netsc-prod        154/tcp    #
+netsc-prod        154/udp    #
+netsc-dev         155/tcp    #
+netsc-dev         155/udp    #
+sqlsrv            156/tcp    # SQL Service
+sqlsrv            156/udp    # SQL Service
+knet-cmp          157/tcp    # KNET/VM Command/Message Protocol
+knet-cmp          157/udp    # KNET/VM Command/Message Protocol
+pcmail-srv        158/tcp    # PCMail Server
+pcmail-srv        158/udp    # PCMail Server
+nss-routing       159/tcp    #
+nss-routing       159/udp    #
+sgmp-traps        160/tcp    #
+sgmp-traps        160/udp    #
+snmp              161/tcp    #
+snmp              161/udp    # Simple Net Mgmt Proto
+snmptrap          162/tcp    # snmp-trap
+snmptrap          162/udp    # snmp-trap
+cmip-man          163/tcp    # CMIP/TCP Manager
+cmip-man          163/udp    # CMIP/TCP Manager
+cmip-agent        164/tcp    # CMIP/TCP Agent
+smip-agent        164/udp    # CMIP/TCP Agent
+xns-courier       165/tcp    # Xerox
+xns-courier       165/udp    # Xerox
+s-net             166/tcp    # Sirius Systems
+s-net             166/udp    # Sirius Systems
+namp              167/tcp    #
+namp              167/udp    #
+rsvd              168/tcp    #
+rsvd              168/udp    #
+send              169/tcp    #
+send              169/udp    #
+print-srv         170/tcp    # Network PostScript
+print-srv         170/udp    # Network PostScript
+multiplex         171/tcp    # Network Innovations Multiplex
+multiplex         171/udp    # Network Innovations Multiplex
+cl-1              172/tcp    # Network Innovations CL/1
+cl-1              172/udp    # Network Innovations CL/1
+xyplex-mux        173/tcp    #
+xyplex-mux        173/udp    #
+mailq             174/tcp    #
+mailq             174/udp    #
+vmnet             175/tcp    #
+vmnet             175/udp    #
+genrad-mux        176/tcp    #
+genrad-mux        176/udp    #
+xdmcp             177/tcp    # X Display Mgr. Control Proto
+xdmcp             177/udp    # X Display Manager Control Protocol
+nextstep          178/tcp    # NextStep Window Server
+nextstep          178/udp    # NextStep Window Server
+bgp               179/tcp    # Border Gateway Protocol
+bgp               179/udp    # Border Gateway Protocol
+ris               180/tcp    # Intergraph
+ris               180/udp    # Intergraph
+unify             181/tcp    #
+unify             181/udp    #
+audit             182/tcp    # Unisys Audit SITP
+audit             182/udp    # Unisys Audit SITP
+ocbinder          183/tcp    #
+ocbinder          183/udp    #
+ocserver          184/tcp    #
+ocserver          184/udp    #
+remote-kis        185/tcp    #
+remote-kis        185/udp    #
+kis               186/tcp    # KIS Protocol
+kis               186/udp    # KIS Protocol
+aci               187/tcp    # Application Communication Interface
+aci               187/udp    # Application Communication Interface
+mumps             188/tcp    # Plus Five's MUMPS
+mumps             188/udp    # Plus Five's MUMPS
+qft               189/tcp    # Queued File Transport
+qft               189/udp    # Queued File Transport
+gacp              190/tcp    # Gateway Access Control Protocol
+cacp              190/udp    # Gateway Access Control Protocol
+prospero          191/tcp    # Prospero Directory Service
+prospero          191/udp    # Prospero Directory Service
+osu-nms           192/tcp    # OSU Network Monitoring System
+osu-nms           192/udp    # OSU Network Monitoring System
+srmp              193/tcp    # Spider Remote Monitoring Protocol
+srmp              193/udp    # Spider Remote Monitoring Protocol
+irc               194/tcp    # Internet Relay Chat
+irc               194/udp    # Internet Relay Chat Protocol
+dn6-nlm-aud       195/tcp    # DNSIX Network Level Module Audit
+dn6-nlm-aud       195/udp    # DNSIX Network Level Module Audit
+dn6-smm-red       196/tcp    # DNSIX Session Mgt Module Audit Redir
+dn6-smm-red       196/udp    # DNSIX Session Mgt Module Audit Redir
+dls               197/tcp    # Directory Location Service
+dls               197/udp    # Directory Location Service
+dls-mon           198/tcp    # Directory Location Service Monitor
+dls-mon           198/udp    # Directory Location Service Monitor
+smux              199/tcp    # SNMP Unix Multiplexer
+smux              199/udp    #
+src               200/tcp    # IBM System Resource Controller
+src               200/udp    # IBM System Resource Controller
+at-rtmp           201/tcp    # AppleTalk Routing Maintenance
+at-rtmp           201/udp    # AppleTalk Routing Maintenance
+at-nbp            202/tcp    # AppleTalk Name Binding
+at-nbp            202/udp    # AppleTalk Name Binding
+at-3              203/tcp    # AppleTalk Unused
+at-3              203/udp    # AppleTalk Unused
+at-echo           204/tcp    # AppleTalk Echo
+at-echo           204/udp    # AppleTalk Echo
+at-5              205/tcp    # AppleTalk Unused
+at-5              205/udp    # AppleTalk Unused
+at-zis            206/tcp    # AppleTalk Zone Information
+at-zis            206/udp    # AppleTalk Zone Information
+at-7              207/tcp    # AppleTalk Unused
+at-7              207/udp    # AppleTalk Unused
+at-8              208/tcp    # AppleTalk Unused
+at-8              208/udp    # AppleTalk Unused
+tam               209/tcp    # Trivial Authenticated Mail Protocol
+tam               209/udp    # Trivial Authenticated Mail Protocol
+z39.50            210/tcp    # wais, ANSI Z39.50
+z39.50            210/udp    # wais, ANSI Z39.50
+914c-g            211/tcp    # Texas Instruments 914C/G Terminal
+914c-g            211/udp    # Texas Instruments 914C/G Terminal
+anet              212/tcp    # ATEXSSTR
+anet              212/udp    # ATEXSSTR
+ipx               213/tcp    #
+ipx               213/udp    #
+vmpwscs           214/tcp    #
+vmpwscs           214/udp    #
+softpc            215/tcp    # Insignia Solutions
+softpc            215/udp    # Insignia Solutions
+atls              216/tcp    # Access Technology License Server
+atls              216/udp    # Access Technology License Server
+dbase             217/tcp    # dBASE Unix
+dbase             217/udp    # dBASE Unix
+mpp               218/tcp    # Netix Message Posting Protocol
+mpp               218/udp    # Netix Message Posting Protocol
+uarps             219/tcp    # Unisys ARPs
+uarps             219/udp    # Unisys ARPs
+imap3             220/tcp    # Interactive Mail Access Protocol v3
+imap3             220/udp    # Interactive Mail Access Protocol v3
+fln-spx           221/tcp    # Berkeley rlogind with SPX auth
+fln-spx           221/udp    # Berkeley rlogind with SPX auth
+rsh-spx           222/tcp    # Berkeley rshd with SPX auth
+rsh-spx           222/udp    # Berkeley rshd with SPX auth
+cdc               223/tcp    # Certificate Distribution Center
+cdc               223/udp    # Certificate Distribution Center
+direct            242/tcp    #
+direct            242/udp    #
+sur-meas          243/tcp    # Survey Measurement
+sur-meas          243/udp    # Survey Measurement
+dayna             244/tcp    #
+dayna             244/udp    #
+link              245/tcp    #
+link              245/udp    #
+dsp3270           246/tcp    # Display Systems Protocol
+dsp3270           246/udp    # Display Systems Protocol
+subntbcst_tftp    247/tcp    #
+subntbcst_tftp    247/udp    #
+bhfhs             248/tcp    #
+bhfhs             248/udp    #
+FW1-secureremote  256/tcp    # also "rap"
+rap               256/udp    #
+FW1-mc-fwmodule   257/tcp    # FW1 management console for communication w/modules and also secure electronic transaction (set) port
+set               257/udp    # secure electronic transaction
+Fw1-mc-gui        258/tcp    # also yak winsock personal chat
+yak-chat          258/udp    # yak winsock personal chat
+esro-gen          259/tcp    # efficient short remote operations
+firewall1-rdp     259/udp    # Firewall 1 proprietary RDP protocol http://www.inside-security.de/fw1_rdp_poc.html
+openport          260/tcp    #
+openport          260/udp    #
+nsiiops           261/tcp    # iiop name service over tls/ssl
+nsiiops           261/udp    # iiop name service over tls/ssl
+arcisdms          262/tcp    #
+arcisdms          262/udp    #
+hdap              263/tcp    #
+hdap              263/udp    #
+bgmp              264/tcp    #
+FW1-or-bgmp       264/udp    # FW1 secureremote alternate
+maybeFW1          265/tcp
+http-mgmt         280/tcp    #
+http-mgmt         280/udp    #
+personal-link     281/tcp    #
+personal-link     281/udp    #
+cableport-ax      282/tcp    # cable port a/x
+cableport-ax      282/udp    # cable port a/x
+novastorbakcup    308/tcp    # novastor backup
+novastorbakcup    308/udp    # novastor backup
+entrusttime       309/tcp    #
+entrusttime       309/udp    #
+bhmds             310/tcp    #
+bhmds             310/udp    #
+asip-webadmin     311/tcp    # appleshare ip webadmin
+asip-webadmin     311/udp    # appleshare ip webadmin
+vslmp             312/tcp    #
+vslmp             312/udp    #
+magenta-logic     313/tcp    #
+magenta-logic     313/udp    #
+opalis-robot      314/tcp    #
+opalis-robot      314/udp    #
+dpsi              315/tcp    #
+dpsi              315/udp    #
+decauth           316/tcp    #
+decauth           316/udp    #
+zannet            317/tcp    #
+zannet            317/udp    #
+pip               321/tcp    #
+pip               321/udp    #
+pdap              344/tcp    # Prospero Data Access Protocol
+pdap              344/udp    # Prospero Data Access Protocol
+pawserv           345/tcp    # Perf Analysis Workbench
+pawserv           345/udp    # Perf Analysis Workbench
+zserv             346/tcp    # Zebra server
+zserv             346/udp    # Zebra server
+fatserv           347/tcp    # Fatmen Server
+fatserv           347/udp    # Fatmen Server
+csi-sgwp          348/tcp    # Cabletron Management Protocol
+csi-sgwp          348/udp    # Cabletron Management Protocol
+mftp              349/tcp    #
+mftp              349/udp    #
+matip-type-a      350/tcp    # MATIP Type A
+matip-type-a      350/udp    #
+matip-type-b      351/tcp    # MATIP Type B or bhoetty also safetp
+matip-type-b      351/udp    # MATIP Type B or bhoetty
+dtag-ste-sb       352/tcp    # DTAG, or bhoedap4
+dtag-ste-sb       352/udp    # DTAG, or bhoedap4
+ndsauth           353/tcp    #
+ndsauth           353/udp    #
+bh611             354/tcp    #
+bh611             354/udp    #
+datex-asn         355/tcp    #
+datex-asn         355/udp    #
+cloanto-net-1     356/tcp    # Cloanto Net 1
+cloanto-net-1     356/udp    #
+bhevent           357/tcp    #
+bhevent           357/udp    #
+shrinkwrap        358/tcp    #
+shrinkwrap        358/udp    #
+tenebris_nts      359/tcp    # Tenebris Network Trace Service
+tenebris_nts      359/udp    # Tenebris Network Trace Service
+scoi2odialog      360/tcp    #
+scoi2odialog      360/udp    #
+semantix          361/tcp    #
+semantix          361/udp    #
+srssend           362/tcp    # SRS Send
+srssend           362/udp    # SRS Send
+rsvp_tunnel       363/tcp    #
+rsvp_tunnel       363/udp    #
+aurora-cmgr       364/tcp    #
+aurora-cmgr       364/udp    #
+dtk               365/tcp    # Deception Tool Kit (www.all.net)
+dtk               365/udp    # Deception Tool Kit (www.all.net)
+odmr              366/tcp    #
+odmr              366/udp    #
+mortgageware      367/tcp    #
+mortgageware      367/udp    #
+qbikgdp           368/tcp    #
+qbikgdp           368/udp    #
+rpc2portmap       369/tcp    #
+rpc2portmap       369/udp    #
+codaauth2         370/tcp    #
+codaauth2         370/udp    #
+clearcase         371/tcp    #
+clearcase         371/udp    #
+ulistserv         372/tcp    # Unix Listserv
+ulistserv         372/udp    # Unix Listserv
+legent-1          373/tcp    # Legent Corporation (now Computer Associates Intl.)
+legent-1          373/udp    # Legent Corporation (now Computer Associates Intl.)
+legent-2          374/tcp    # Legent Corporation (now Computer Associates Intl.)
+legent-2          374/udp    # Legent Corporation (now Computer Associates Intl.)
+hassle            375/tcp    #
+hassle            375/udp    #
+nip               376/tcp    # Amiga Envoy Network Inquiry Proto
+nip               376/udp    # Amiga Envoy Network Inquiry Proto
+tnETOS            377/tcp    # NEC Corporation
+tnETOS            377/udp    # NEC Corporation
+dsETOS            378/tcp    # NEC Corporation
+dsETOS            378/udp    # NEC Corporation
+is99c             379/tcp    # TIA/EIA/IS-99 modem client
+is99c             379/udp    # TIA/EIA/IS-99 modem client
+is99s             380/tcp    # TIA/EIA/IS-99 modem server
+is99s             380/udp    # TIA/EIA/IS-99 modem server
+hp-collector      381/tcp    # hp performance data collector
+hp-collector      381/udp    # hp performance data collector
+hp-managed-node   382/tcp    # hp performance data managed node
+hp-managed-node   382/udp    # hp performance data managed node
+hp-alarm-mgr      383/tcp    # hp performance data alarm manager
+hp-alarm-mgr      383/udp    # hp performance data alarm manager
+arns              384/tcp    # A Remote Network Server System
+arns              384/udp    # A Remote Network Server System
+ibm-app           385/tcp    # IBM Application
+ibm-app           385/udp    # IBM Application
+asa               386/tcp    # ASA Message Router Object Def.
+asa               386/udp    # ASA Message Router Object Def.
+aurp              387/tcp    # Appletalk Update-Based Routing Pro.
+aurp              387/udp    # Appletalk Update-Based Routing Pro.
+unidata-ldm       388/tcp    # Unidata LDM Version 4
+unidata-ldm       388/udp    # Unidata LDM Version 4
+ldap              389/tcp    # Lightweight Directory Access Protocol
+ldap              389/udp    # Lightweight Directory Access Protocol
+uis               390/tcp    #
+uis               390/udp    #
+synotics-relay    391/tcp    # SynOptics SNMP Relay Port
+synotics-relay    391/udp    # SynOptics SNMP Relay Port
+synotics-broker   392/tcp    # SynOptics Port Broker Port
+synotics-broker   392/udp    # SynOptics Port Broker Port
+dis               393/tcp    # Data Interpretation System
+dis               393/udp    # Data Interpretation System
+embl-ndt          394/tcp    # EMBL Nucleic Data Transfer
+embl-ndt          394/udp    # EMBL Nucleic Data Transfer
+netcp             395/tcp    # NETscout Control Protocol
+netcp             395/udp    # NETscout Control Protocol
+netware-ip        396/tcp    # Novell Netware over IP
+netware-ip        396/udp    # Novell Netware over IP
+mptn              397/tcp    # Multi Protocol Trans. Net.
+mptn              397/udp    # Multi Protocol Trans. Net.
+kryptolan         398/tcp    #
+kryptolan         398/udp    #
+iso-tsap-c2       399/tcp    # ISO-TSAP Class 2
+iso-tsap-c2       399/udp    # ISO-TSAP Class 2
+work-sol          400/tcp    # Workstation Solutions
+work-sol          400/udp    # Workstation Solutions
+ups               401/tcp    # Uninterruptible Power Supply
+ups               401/udp    # Uninterruptible Power Supply
+genie             402/tcp    # Genie Protocol
+genie             402/udp    # Genie Protocol
+decap             403/tcp    #
+decap             403/udp    #
+nced              404/tcp    #
+nced              404/udp    #
+ncld              405/tcp    #
+ncld              405/udp    #
+imsp              406/tcp    # Interactive Mail Support Protocol
+imsp              406/udp    # Interactive Mail Support Protocol
+timbuktu          407/tcp    #
+timbuktu          407/udp    #
+prm-sm            408/tcp    # Prospero Resource Manager Sys. Man.
+prm-sm            408/udp    # Prospero Resource Manager Sys. Man.
+prm-nm            409/tcp    # Prospero Resource Manager Node Man.
+prm-nm            409/udp    # Prospero Resource Manager Node Man.
+decladebug        410/tcp    # DECLadebug Remote Debug Protocol
+decladebug        410/udp    # DECLadebug Remote Debug Protocol
+rmt               411/tcp    # Remote MT Protocol
+rmt               411/udp    # Remote MT Protocol
+synoptics-trap    412/tcp    # Trap Convention Port
+synoptics-trap    412/udp    # Trap Convention Port
+smsp              413/tcp    #
+smsp              413/udp    #
+infoseek          414/tcp    #
+infoseek          414/udp    #
+bnet              415/tcp    #
+bnet              415/udp    #
+silverplatter     416/tcp    #
+silverplatter     416/udp    #
+onmux             417/tcp    # Meeting maker
+onmux             417/udp    # Meeting maker
+hyper-g           418/tcp    #
+hyper-g           418/udp    #
+ariel1            419/tcp    #
+ariel1            419/udp    #
+smpte             420/tcp    #
+smpte             420/udp    #
+ariel2            421/tcp    #
+ariel2            421/udp    #
+ariel3            422/tcp    #
+ariel3            422/udp    #
+opc-job-start     423/tcp    # IBM Operations Planning and Control Start
+opc-job-start     423/udp    # IBM Operations Planning and Control Start
+opc-job-track     424/tcp    # IBM Operations Planning and Control Track
+opc-job-track     424/udp    # IBM Operations Planning and Control Track
+icad-el           425/tcp    #
+icad-el           425/udp    #
+smartsdp          426/tcp    #
+smartsdp          426/udp    #
+svrloc            427/tcp    # Server Location
+svrloc            427/udp    # Server Location
+ocs_cmu           428/tcp    #
+ocs_cmu           428/udp    #
+ocs_amu           429/tcp    #
+ocs_amu           429/udp    #
+utmpsd            430/tcp    #
+utmpsd            430/udp    #
+utmpcd            431/tcp    #
+utmpcd            431/udp    #
+iasd              432/tcp    #
+iasd              432/udp    #
+nnsp              433/tcp    # Usenet, Network News Transfer
+nnsp              433/udp    #
+mobileip-agent    434/tcp    #
+mobileip-agent    434/udp    #
+mobilip-mn        435/tcp    #
+mobilip-mn        435/udp    #
+dna-cml           436/tcp    #
+dna-cml           436/udp    #
+comscm            437/tcp    #
+comscm            437/udp    #
+dsfgw             438/tcp    #
+dsfgw             438/udp    #
+dasp              439/tcp    #
+dasp              439/udp    #
+sgcp              440/tcp    #
+sgcp              440/udp    #
+decvms-sysmgt     441/tcp    #
+decvms-sysmgt     441/udp    #
+cvc_hostd         442/tcp    #
+cvc_hostd         442/udp    #
+https             443/tcp    # secure http (SSL)
+https             443/udp    #
+snpp              444/tcp    # Simple Network Paging Protocol
+snpp              444/udp    # Simple Network Paging Protocol
+microsoft-ds      445/tcp    # SMB directly over IP
+microsoft-ds      445/udp    #
+ddm-rdb           446/tcp    #
+ddm-rdb           446/udp    #
+ddm-dfm           447/tcp    #
+ddm-dfm           447/udp    #
+ddm-ssl           448/tcp    # ddm-byte
+ddm-ssl           448/udp    # ddm-byte
+as-servermap      449/tcp    # AS Server Mapper
+as-servermap      449/udp    # AS Server Mapper
+tserver           450/tcp    #
+tserver           450/udp    #
+sfs-smp-net       451/tcp    # Cray Network Semaphore server
+sfs-smp-net       451/udp    # Cray Network Semaphore server
+sfs-config        452/tcp    # Cray SFS config server
+sfs-config        452/udp    # Cray SFS config server
+creativeserver    453/tcp    #
+creativeserver    453/udp    #
+contentserver     454/tcp    #
+contentserver     454/udp    #
+creativepartnr    455/tcp    #
+creativepartnr    455/udp    #
+macon-tcp         456/tcp    #
+macon-udp         456/udp    #
+scohelp           457/tcp    #
+scohelp           457/udp    #
+appleqtc          458/tcp    # apple quick time
+appleqtc          458/udp    # apple quick time
+ampr-rcmd         459/tcp    #
+ampr-rcmd         459/udp    #
+skronk            460/tcp    #
+skronk            460/udp    #
+datasurfsrv       461/tcp    #
+datasurfsrv       461/udp    #
+datasurfsrvsec    462/tcp    #
+datasurfsrvsec    462/udp    #
+alpes             463/tcp    #
+alpes             463/udp    #
+kpasswd5          464/tcp    # Kerberos (v5)
+kpasswd5          464/udp    # Kerberos (v5)
+smtps             465/tcp    # smtp protocol over TLS/SSL (was ssmtp)
+smtps             465/udp    # smtp protocol over TLS/SSL (was ssmtp)
+digital-vrc       466/tcp    #
+digital-vrc       466/udp    #
+mylex-mapd        467/tcp    #
+mylex-mapd        467/udp    #
+photuris          468/tcp    # Photuris Key Management
+photuris          468/udp    #
+rcp               469/tcp    # Radio Control Protocol
+rcp               469/udp    # Radio Control Protocol
+scx-proxy         470/tcp    #
+scx-proxy         470/udp    #
+mondex            471/tcp    #
+mondex            471/udp    #
+ljk-login         472/tcp    #
+ljk-login         472/udp    #
+hybrid-pop        473/tcp    #
+hybrid-pop        473/udp    #
+tn-tl-w1          474/tcp    #
+tn-tl-w2          474/udp    #
+tcpnethaspsrv     475/tcp    #
+tcpnethaspsrv     475/udp    #
+tn-tl-fd1         476/tcp    #
+tn-tl-fd1         476/udp    #
+ss7ns             477/tcp    #
+ss7ns             477/udp    #
+spsc              478/tcp    #
+spsc              478/udp    #
+iafserver         479/tcp    #
+iafserver         479/udp    #
+loadsrv           480/tcp    #
+iafdbase          480/udp    #
+dvs               481/tcp    #
+ph                481/udp    #
+bgs-nsi           482/tcp    #
+xlog              482/udp    #
+ulpnet            483/tcp    #
+ulpnet            483/udp    #
+integra-sme       484/tcp    # Integra Software Management Environment
+integra-sme       484/udp    # Integra Software Management Environment
+powerburst        485/tcp    # Air Soft Power Burst
+powerburst        485/udp    # Air Soft Power Burst
+sstats            486/tcp    #
+avian             486/udp    #
+saft              487/tcp    # saft Simple Asynchronous File Transfer
+saft              487/udp    # saft Simple Asynchronous File Transfer
+gss-http          488/tcp    #
+gss-http          488/udp    #
+nest-protocol     489/tcp    #
+nest-protocol     489/udp    #
+micom-pfs         490/tcp    #
+micom-pfs         490/udp    #
+go-login          491/tcp    #
+go-login          491/udp    #
+ticf-1            492/tcp    # Transport Independent Convergence for FNA
+ticf-1            492/udp    # Transport Independent Convergence for FNA
+ticf-2            493/tcp    # Transport Independent Convergence for FNA
+ticf-2            493/udp    # Transport Independent Convergence for FNA
+pov-ray           494/tcp    #
+pov-ray           494/udp    #
+intecourier       495/tcp    #
+intecourier       495/udp    #
+pim-rp-disc       496/tcp    #
+pim-rp-disc       496/udp    #
+dantz             497/tcp    #
+dantz             497/udp    #
+siam              498/tcp    #
+siam              498/udp    #
+iso-ill           499/tcp    # ISO ILL Protocol
+iso-ill           499/udp    # ISO ILL Protocol
+isakmp            500/tcp    #
+isakmp            500/udp    #
+stmf              501/tcp    #
+stmf              501/udp    #
+asa-appl-proto    502/tcp    #
+asa-appl-proto    502/udp    #
+intrinsa          503/tcp    #
+intrinsa          503/udp    #
+citadel           504/tcp    #
+citadel           504/udp    #
+mailbox-lm        505/tcp    #
+mailbox-lm        505/udp    #
+ohimsrv           506/tcp    #
+ohimsrv           506/udp    #
+crs               507/tcp    #
+crs               507/udp    #
+xvttp             508/tcp    #
+xvttp             508/udp    #
+snare             509/tcp    #
+snare             509/udp    #
+fcp               510/tcp    # FirstClass Protocol
+fcp               510/udp    # FirstClass Protocol
+passgo            511/tcp    #
+passgo            511/udp    #
+exec              512/tcp    # BSD rexecd(8)
+biff              512/udp    # comsat
+login             513/tcp    # BSD rlogind(8)
+who               513/udp    # BSD rwhod(8)
+shell             514/tcp    # BSD rshd(8)
+syslog            514/udp    # BSD syslogd(8)
+printer           515/tcp    # spooler (lpd)
+printer           515/udp    # spooler (lpd)
+videotex          516/tcp    #
+videotex          516/udp    #
+talk              517/tcp    # like tenex link, but across
+talk              517/udp    # BSD talkd(8)
+ntalk             518/tcp    # (talkd)
+ntalk             518/udp    # (talkd)
+utime             519/tcp    # unixtime
+utime             519/udp    # unixtime
+efs               520/tcp    # extended file name server
+route             520/udp    # router routed -- RIP
+ripng             521/tcp    #
+ripng             521/udp    #
+ulp               522/tcp    #
+ulp               522/udp    #
+ibm-db2           523/tcp    #
+ibm-db2           523/udp    #
+ncp               524/tcp    #
+ncp               524/udp    #
+timed             525/tcp    # timeserver
+timed             525/udp    # timeserver
+tempo             526/tcp    # newdate
+tempo             526/udp    # newdate
+stx               527/tcp    # Stock IXChange
+stx               527/udp    # Stock IXChange
+custix            528/tcp    # Customer IXChange
+custix            528/udp    # Customer IXChange
+irc-serv          529/tcp    #
+irc-serv          529/udp    #
+courier           530/tcp    # rpc
+courier           530/udp    # rpc
+conference        531/tcp    # chat
+conference        531/udp    # chat
+netnews           532/tcp    # readnews
+netnews           532/udp    # readnews
+netwall           533/tcp    # for emergency broadcasts
+netwall           533/udp    # for emergency broadcasts
+mm-admin          534/tcp    # MegaMedia Admin
+mm-admin          534/udp    # MegaMedia Admin
+iiop              535/tcp    #
+iiop              535/udp    #
+opalis-rdv        536/tcp    #
+opalis-rdv        536/udp    #
+nmsp              537/tcp    # Networked Media Streaming Protocol
+nmsp              537/udp    # Networked Media Streaming Protocol
+gdomap            538/tcp    #
+gdomap            538/udp    #
+apertus-ldp       539/tcp    # Apertus Technologies Load Determination
+apertus-ldp       539/udp    # Apertus Technologies Load Determination
+uucp              540/tcp    # uucpd
+uucp              540/udp    # uucpd
+uucp-rlogin       541/tcp    #
+uucp-rlogin       541/udp    #
+commerce          542/tcp    #
+commerce          542/udp    #
+klogin            543/tcp    # Kerberos (v4/v5)
+klogin            543/udp    # Kerberos (v4/v5)
+kshell            544/tcp    # krcmd Kerberos (v4/v5)
+kshell            544/udp    # krcmd Kerberos (v4/v5)
+ekshell           545/tcp    # Kerberos encrypted remote shell -kfall
+appleqtcsrvr      545/udp    #
+dhcpv6-client     546/tcp    # DHCPv6 Client
+dhcpv6-client     546/udp    # DHCPv6 Client
+dhcpv6-server     547/tcp    # DHCPv6 Server
+dhcpv6-server     547/udp    # DHCPv6 Server
+afpovertcp        548/tcp    # AFP over TCP
+afpovertcp        548/udp    # AFP over UDP
+idfp              549/tcp    #
+idfp              549/udp    #
+new-rwho          550/tcp    # new-who
+new-rwho          550/udp    # new-who
+cybercash         551/tcp    #
+cybercash         551/udp    #
+deviceshare       552/tcp    #
+deviceshare       552/udp    #
+pirp              553/tcp    #
+pirp              553/udp    #
+rtsp              554/tcp    # Real Time Stream Control Protocol
+rtsp              554/udp    # Real Time Stream Control Protocol
+dsf               555/tcp    #
+dsf               555/udp    #
+remotefs          556/tcp    # rfs, rfs_server, Brunhoff remote filesystem
+remotefs          556/udp    # rfs, rfs_server, Brunhoff remote filesystem
+openvms-sysipc    557/tcp    #
+openvms-sysipc    557/udp    #
+sdnskmp           558/tcp    #
+sdnskmp           558/udp    #
+teedtap           559/tcp    #
+teedtap           559/udp    #
+rmonitor          560/tcp    # rmonitord
+rmonitor          560/udp    # rmonitord
+monitor           561/tcp    #
+monitor           561/udp    #
+chshell           562/tcp    # chcmd
+chshell           562/udp    # chcmd
+snews             563/tcp    #
+snews             563/udp    #
+9pfs              564/tcp    # plan 9 file service
+9pfs              564/udp    # plan 9 file service
+whoami            565/tcp    #
+whoami            565/udp    #
+streettalk        566/tcp    #
+banyan-rpc        567/tcp    #
+banyan-rpc        567/udp    #
+ms-shuttle        568/tcp    # Microsoft shuttle
+ms-shuttle        568/udp    # Microsoft shuttle
+ms-rome           569/tcp    # Microsoft rome
+ms-rome           569/udp    # Microsoft rome
+meter             570/tcp    # demon
+meter             570/udp    # demon
+umeter            571/tcp    # udemon
+umeter            571/udp    # udemon
+sonar             572/tcp    #
+sonar             572/udp    #
+banyan-vip        573/tcp    #
+banyan-vip        573/udp    #
+ftp-agent         574/tcp    # FTP Software Agent System
+ftp-agent         574/udp    # FTP Software Agent System
+vemmi             575/tcp    #
+vemmi             575/udp    #
+ipcd              576/tcp    #
+ipcd              576/udp    #
+vnas              577/tcp    #
+vnas              577/udp    #
+ipdd              578/tcp    #
+ipdd              578/udp    #
+decbsrv           579/tcp    #
+decbsrv           579/udp    #
+sntp-heartbeat    580/tcp    #
+sntp-heartbeat    580/udp    #
+bdp               581/tcp    # Bundle Discovery Protocol
+bdp               581/udp    # Bundle Discovery Protocol
+scc-security      582/tcp    #
+scc-security      582/udp    #
+philips-vc        583/tcp    # Philips Video-Conferencing
+philips-vc        583/udp    # Philips Video-Conferencing
+keyserver         584/tcp    #
+keyserver         584/udp    #
+imap4-ssl         585/tcp    # IMAP4+SSL (use of 585 is not recommended,
+imap4-ssl         585/udp    # use 993 instead)
+password-chg      586/tcp    #
+password-chg      586/udp    #
+submission        587/tcp    #
+submission        587/udp    #
+cal               588/tcp    #
+cal               588/udp    #
+eyelink           589/tcp    #
+eyelink           589/udp    #
+tns-cml           590/tcp    #
+tns-cml           590/udp    #
+http-alt          591/tcp    # FileMaker, Inc. - HTTP Alternate
+http-alt          591/udp    # FileMaker, Inc. - HTTP Alternate
+eudora-set        592/tcp    #
+eudora-set        592/udp    #
+http-rpc-epmap    593/tcp    # HTTP RPC Ep Map
+http-rpc-epmap    593/udp    # HTTP RPC Ep Map
+tpip              594/tcp    #
+tpip              594/udp    #
+cab-protocol      595/tcp    #
+cab-protocol      595/udp    #
+smsd              596/tcp    #
+smsd              596/udp    #
+ptcnameservice    597/tcp    # PTC Name Service
+ptcnameservice    597/udp    # PTC Name Service
+sco-websrvrmg3    598/tcp    # SCO Web Server Manager 3
+sco-websrvrmg3    598/udp    # SCO Web Server Manager 3
+acp               599/tcp    # Aeolon Core Protocol
+acp               599/udp    # Aeolon Core Protocol
+ipcserver         600/tcp    # Sun IPC server
+ipcserver         600/udp    # Sun IPC server
+urm               606/tcp    # Cray Unified Resource Manager
+urm               606/udp    # Cray Unified Resource Manager
+nqs               607/tcp    #
+nqs               607/udp    #
+sift-uft          608/tcp    # Sender-Initiated/Unsolicited File Transfer
+sift-uft          608/udp    # Sender-Initiated/Unsolicited File Transfer
+npmp-trap         609/tcp    #
+npmp-trap         609/udp    #
+npmp-local        610/tcp    #
+npmp-local        610/udp    #
+npmp-gui          611/tcp    #
+npmp-gui          611/udp    #
+sco-dtmgr         617/tcp    # SCO Desktop Administration Server or Arkeia (www.akriea.com) backup software
+sco-dtmgr         617/udp    # SCO Desktop Administration Server
+qmqp              628/tcp    # Qmail Quick Mail Queueing
+ipp               631/tcp    # Internet Printing Protocol -- for one implementation see http://www.cups.org (Common UNIX Printing System)
+ginad             634/tcp    #
+ginad             634/udp    #
+mount             635/udp    # NFS Mount Service
+ldapssl           636/tcp    # LDAP over SSL
+lanserver         637/tcp    #
+lanserver         637/udp    #
+pcnfs             640/udp    # PC-NFS DOS Authentication
+bwnfs             650/udp    # BW-NFS DOS Authentication
+mac-srvr-admin    660/tcp    # MacOS Server Admin
+mac-srvr-admin    660/udp    # MacOS Server Admin
+doom              666/tcp    # doom Id Software
+doom              666/udp    # doom Id Software
+acap              674/tcp    # ACAP server of Communigate (www.stalker.com)
+resvc             691/tcp    # The Microsoft Exchange 2000 Server Routing Service
+elcsd             704/tcp    # errlog copy/server daemon
+elcsd             704/udp    # errlog copy/server daemon
+silc              706/tcp    # Secure Internet Live Conferencing -- http://silcnet.org
+entrustmanager    709/tcp    # EntrustManager - NorTel DES auth network see 389/tcp
+entrustmanager    709/udp    # EntrustManager - NorTel DES auth network see 389/tcp
+netviewdm1        729/tcp    # IBM NetView DM/6000 Server/Client
+netviewdm1        729/udp    # IBM NetView DM/6000 Server/Client
+netviewdm2        730/tcp    # IBM NetView DM/6000 send/tcp
+netviewdm2        730/udp    # IBM NetView DM/6000 send/tcp
+netviewdm3        731/tcp    # IBM NetView DM/6000 receive/tcp
+netviewdm3        731/udp    # IBM NetView DM/6000 receive/tcp
+sometimes-rpc2    737/udp    # Rusersd on my OpenBSD box
+netcp             740/tcp    # NETscout Control Protocol
+netcp             740/udp    # NETscout Control Protocol
+netgw             741/tcp    #
+netgw             741/udp    #
+netrcs            742/tcp    # Network based Rev. Cont. Sys.
+netrcs            742/udp    # Network based Rev. Cont. Sys.
+flexlm            744/tcp    # Flexible License Manager
+flexlm            744/udp    # Flexible License Manager
+fujitsu-dev       747/tcp    # Fujitsu Device Control
+fujitsu-dev       747/udp    # Fujitsu Device Control
+ris-cm            748/tcp    # Russell Info Sci Calendar Manager
+ris-cm            748/udp    # Russell Info Sci Calendar Manager
+kerberos-adm      749/tcp    # Kerberos 5 admin/changepw
+kerberos-adm      749/udp    # Kerberos 5 admin/changepw
+kerberos          750/tcp    # kdc Kerberos (v4)
+kerberos          750/udp    # kdc Kerberos (v4)
+kerberos_master   751/tcp    # Kerberos `kadmin' (v4)
+kerberos_master   751/udp    # Kerberos `kadmin' (v4)
+qrh               752/tcp    #
+qrh               752/udp    #
+rrh               753/tcp    #
+rrh               753/udp    #
+krb_prop          754/tcp    # kerberos/v5 server propagation
+nlogin            758/tcp    #
+nlogin            758/udp    #
+con               759/tcp    #
+con               759/udp    #
+krbupdate         760/tcp    # kreg Kerberos (v4) registration
+ns                760/udp    #
+kpasswd           761/tcp    # kpwd Kerberos (v4) "passwd"
+rxe               761/udp    #
+quotad            762/tcp    #
+quotad            762/udp    #
+cycleserv         763/tcp    #
+cycleserv         763/udp    #
+omserv            764/tcp    #
+omserv            764/udp    #
+webster           765/tcp    #
+webster           765/udp    #
+phonebook         767/tcp    # phone
+phonebook         767/udp    # phone
+vid               769/tcp    #
+vid               769/udp    #
+cadlock           770/tcp    #
+cadlock           770/udp    #
+rtip              771/tcp    #
+rtip              771/udp    #
+cycleserv2        772/tcp    #
+cycleserv2        772/udp    #
+submit            773/tcp    #
+notify            773/udp    #
+rpasswd           774/tcp    #
+acmaint_dbd       774/udp    #
+entomb            775/tcp    #
+acmaint_transd    775/udp    #
+wpages            776/tcp    #
+wpages            776/udp    #
+wpgs              780/tcp    #
+wpgs              780/udp    #
+hp-collector      781/tcp    # hp performance data collector
+hp-collector      781/udp    # hp performance data collector
+hp-managed-node   782/tcp    # hp performance data managed node
+hp-managed-node   782/udp    # hp performance data managed node
+hp-alarm-mgr      783/tcp    # hp performance data alarm manager
+hp-alarm-mgr      783/udp    # hp performance data alarm manager
+concert           786/tcp    #
+concert           786/udp    #
+controlit         799/tcp
+mdbs_daemon       800/tcp    #
+mdbs_daemon       800/udp    #
+device            801/tcp    #
+device            801/udp    #
+supfilesrv        871/tcp    # SUP server
+rsync             873/tcp    # Rsync server ( http://rsync.samba.org )
+accessbuilder     888/tcp    # or Audio CD Database
+accessbuilder     888/udp    #
+sun-manageconsole 898/tcp    # Solaris Management Console Java listener (Solaris 8 & 9)
+ftps-data         989/tcp    # ftp protocol, data, over TLS/SSL
+samba-swat        901/tcp    # Samba SWAT tool.  Also used by ISS RealSecure.
+oftep-rpc         950/tcp    # Often RPC.statd (on Redhat Linux)
+rndc              953/tcp    # RNDC is used by BIND 9 (& probably other NS)
+securenetpro-sensor 975/tcp
+ftps              990/tcp    # ftp protocol, control, over TLS/SSL
+telnets           992/tcp    # telnet protocol over TLS/SSL
+imaps             993/tcp    # imap4 protocol over TLS/SSL
+ircs              994/tcp    # irc protocol over TLS/SSL
+pop3s             995/tcp    # POP3 protocol over TLS/SSL
+xtreelic          996/tcp    # XTREE License Server
+vsinet            996/udp    #
+maitrd            997/tcp    #
+maitrd            997/udp    #
+busboy            998/tcp    #
+puparp            998/udp    #
+garcon            999/tcp    #
+applix            999/udp    # Applix ac
+cadlock           1000/tcp   #
+ock               1000/udp   #
+ufsd              1008/tcp   # ufsd		# UFS-aware server
+ufsd              1008/udp   #
+sometimes-rpc1    1012/udp   # This is rstatd on my openBSD box
+netvenuechat      1023/tcp   # Nortel NetVenue Notification, Chat, Intercom
+kdm               1024/tcp   # K Display Manager (KDE version of xdm)
+NFS-or-IIS        1025/tcp   # IIS, NFS, or listener RFS remote_file_sharing
+blackjack         1025/udp   # network blackjack
+LSA-or-nterm      1026/tcp   # nterm remote_login network_terminal
+IIS               1027/tcp
+ms-lsa            1028/udp   #
+ms-lsa            1029/tcp   #
+iad1              1030/tcp   # BBN IAD
+iad1              1030/udp   # BBN IAD
+iad2              1031/tcp   # BBN IAD
+iad2              1031/udp   # BBN IAD
+iad3              1032/tcp   # BBN IAD
+iad3              1032/udp   # BBN IAD
+netinfo           1033/tcp   # Netinfo is apparently on many OS X boxes.
+OTG-fileshare     1050/tcp   # J2EE nameserver, also OTG, also called Disk/Application extender. Could also be MiniCommand backdoor OTGlicenseserv
+nim               1058/tcp   #
+nim               1058/udp   #
+nimreg            1059/tcp   #
+nimreg            1059/udp   #
+instl_boots       1067/tcp   # Installation Bootstrap Proto. Serv.
+instl_boots       1067/udp   # Installation Bootstrap Proto. Serv.
+instl_bootc       1068/tcp   # Installation Bootstrap Proto. Cli.
+instl_bootc       1068/udp   # Installation Bootstrap Proto. Cli.
+sns_credit        1076/tcp   # Shared Network Services (SNS) for Canadian credit card authorizations
+socks             1080/tcp   #
+socks             1080/udp   #
+ansoft-lm-1       1083/tcp   # Anasoft License Manager
+ansoft-lm-1       1083/udp   # Anasoft License Manager
+ansoft-lm-2       1084/tcp   # Anasoft License Manager
+ansoft-lm-2       1084/udp   # Anasoft License Manager
+xaudio            1103/tcp   # Xaserver	# X Audio Server
+kpop              1109/tcp   # Pop with Kerberos
+nfsd-status       1110/tcp   # Cluster status info
+nfsd-keepalive    1110/udp   # Client status info
+msql              1112/tcp   # mini-sql server
+supfiledbg        1127/tcp   # SUP debugging
+cce3x             1139/tcp   # ClearCommerce Engine 3.x ( www.clearcommerce.com)
+nfa               1155/tcp   # Network File Access
+nfa               1155/udp   # Network File Access
+phone             1167/udp   # conference calling
+skkserv           1178/tcp   # SKK (kanji input)
+lupa              1212/tcp   #
+lupa              1212/udp   #
+quicktime         1220/tcp   # Apple Darwin and QuickTime Streaming Administration Servers
+nerv              1222/tcp   # SNI R&D network
+nerv              1222/udp   # SNI R&D network
+hotline           1234/tcp   #
+msg               1241/tcp   # remote message server
+hermes            1248/tcp   #
+hermes            1248/udp   #
+alta-ana-lm       1346/tcp   # Alta Analytics License Manager
+alta-ana-lm       1346/udp   # Alta Analytics License Manager
+bbn-mmc           1347/tcp   # multi media conferencing
+bbn-mmc           1347/udp   # multi media conferencing
+bbn-mmx           1348/tcp   # multi media conferencing
+bbn-mmx           1348/udp   # multi media conferencing
+sbook             1349/tcp   # Registration Network Protocol
+sbook             1349/udp   # Registration Network Protocol
+editbench         1350/tcp   # Registration Network Protocol
+editbench         1350/udp   # Registration Network Protocol
+equationbuilder   1351/tcp   # Digital Tool Works (MIT)
+equationbuilder   1351/udp   # Digital Tool Works (MIT)
+lotusnotes        1352/tcp   # Lotus Note
+lotusnotes        1352/udp   # Lotus Note
+relief            1353/tcp   # Relief Consulting
+relief            1353/udp   # Relief Consulting
+rightbrain        1354/tcp   # RightBrain Software
+rightbrain        1354/udp   # RightBrain Software
+intuitive-edge    1355/tcp   # Intuitive Edge
+intuitive-edge    1355/udp   # Intuitive Edge
+cuillamartin      1356/tcp   # CuillaMartin Company
+cuillamartin      1356/udp   # CuillaMartin Company
+pegboard          1357/tcp   # Electronic PegBoard
+pegboard          1357/udp   # Electronic PegBoard
+connlcli          1358/tcp   #
+connlcli          1358/udp   #
+ftsrv             1359/tcp   #
+ftsrv             1359/udp   #
+mimer             1360/tcp   #
+mimer             1360/udp   #
+linx              1361/tcp   #
+linx              1361/udp   #
+timeflies         1362/tcp   #
+timeflies         1362/udp   #
+ndm-requester     1363/tcp   # Network DataMover Requester
+ndm-requester     1363/udp   # Network DataMover Requester
+ndm-server        1364/tcp   # Network DataMover Server
+ndm-server        1364/udp   # Network DataMover Server
+adapt-sna         1365/tcp   # Network Software Associates
+adapt-sna         1365/udp   # Network Software Associates
+netware-csp       1366/tcp   # Novell NetWare Comm Service Platform
+netware-csp       1366/udp   # Novell NetWare Comm Service Platform
+dcs               1367/tcp   #
+dcs               1367/udp   #
+screencast        1368/tcp   #
+screencast        1368/udp   #
+gv-us             1369/tcp   # GlobalView to Unix Shell
+gv-us             1369/udp   # GlobalView to Unix Shell
+us-gv             1370/tcp   # Unix Shell to GlobalView
+us-gv             1370/udp   # Unix Shell to GlobalView
+fc-cli            1371/tcp   # Fujitsu Config Protocol
+fc-cli            1371/udp   # Fujitsu Config Protocol
+fc-ser            1372/tcp   # Fujitsu Config Protocol
+fc-ser            1372/udp   # Fujitsu Config Protocol
+chromagrafx       1373/tcp   #
+chromagrafx       1373/udp   #
+molly             1374/tcp   # EPI Software Systems
+molly             1374/udp   # EPI Software Systems
+bytex             1375/tcp   #
+bytex             1375/udp   #
+ibm-pps           1376/tcp   # IBM Person to Person Software
+ibm-pps           1376/udp   # IBM Person to Person Software
+cichlid           1377/tcp   # Cichlid License Manager
+cichlid           1377/udp   # Cichlid License Manager
+elan              1378/tcp   # Elan License Manager
+elan              1378/udp   # Elan License Manager
+dbreporter        1379/tcp   # Integrity Solutions
+dbreporter        1379/udp   # Integrity Solutions
+telesis-licman    1380/tcp   # Telesis Network License Manager
+telesis-licman    1380/udp   # Telesis Network License Manager
+apple-licman      1381/tcp   # Apple Network License Manager
+apple-licman      1381/udp   # Apple Network License Manager
+gwha              1383/tcp   # GW Hannaway Network License Manager
+gwha              1383/udp   # GW Hannaway Network License Manager
+os-licman         1384/tcp   # Objective Solutions License Manager
+os-licman         1384/udp   # Objective Solutions License Manager
+atex_elmd         1385/tcp   # Atex Publishing License Manager
+atex_elmd         1385/udp   # Atex Publishing License Manager
+checksum          1386/tcp   # CheckSum License Manager
+checksum          1386/udp   # CheckSum License Manager
+cadsi-lm          1387/tcp   # Computer Aided Design Software Inc LM
+cadsi-lm          1387/udp   # Computer Aided Design Software Inc LM
+objective-dbc     1388/tcp   # Objective Solutions DataBase Cache
+objective-dbc     1388/udp   # Objective Solutions DataBase Cache
+iclpv-dm          1389/tcp   # Document Manager
+iclpv-dm          1389/udp   # Document Manager
+iclpv-sc          1390/tcp   # Storage Controller
+iclpv-sc          1390/udp   # Storage Controller
+iclpv-sas         1391/tcp   # Storage Access Server
+iclpv-sas         1391/udp   # Storage Access Server
+iclpv-pm          1392/tcp   # Print Manager
+iclpv-pm          1392/udp   # Print Manager
+iclpv-nls         1393/tcp   # Network Log Server
+iclpv-nls         1393/udp   # Network Log Server
+iclpv-nlc         1394/tcp   # Network Log Client
+iclpv-nlc         1394/udp   # Network Log Client
+iclpv-wsm         1395/tcp   # PC Workstation Manager software
+iclpv-wsm         1395/udp   # PC Workstation Manager software
+dvl-activemail    1396/tcp   # DVL Active Mail
+dvl-activemail    1396/udp   # DVL Active Mail
+audio-activmail   1397/tcp   # Audio Active Mail
+audio-activmail   1397/udp   # Audio Active Mail
+video-activmail   1398/tcp   # Video Active Mail
+video-activmail   1398/udp   # Video Active Mail
+cadkey-licman     1399/tcp   # Cadkey License Manager
+cadkey-licman     1399/udp   # Cadkey License Manager
+cadkey-tablet     1400/tcp   # Cadkey Tablet Daemon
+cadkey-tablet     1400/udp   # Cadkey Tablet Daemon
+goldleaf-licman   1401/tcp   # Goldleaf License Manager
+goldleaf-licman   1401/udp   # Goldleaf License Manager
+prm-sm-np         1402/tcp   # Prospero Resource Manager
+prm-sm-np         1402/udp   # Prospero Resource Manager
+prm-nm-np         1403/tcp   # Prospero Resource Manager
+prm-nm-np         1403/udp   # Prospero Resource Manager
+igi-lm            1404/tcp   # Infinite Graphics License Manager
+igi-lm            1404/udp   # Infinite Graphics License Manager
+ibm-res           1405/tcp   # IBM Remote Execution Starter
+ibm-res           1405/udp   # IBM Remote Execution Starter
+netlabs-lm        1406/tcp   # NetLabs License Manager
+netlabs-lm        1406/udp   # NetLabs License Manager
+dbsa-lm           1407/tcp   # DBSA License Manager
+dbsa-lm           1407/udp   # DBSA License Manager
+sophia-lm         1408/tcp   # Sophia License Manager
+sophia-lm         1408/udp   # Sophia License Manager
+here-lm           1409/tcp   # Here License Manager
+here-lm           1409/udp   # Here License Manager
+hiq               1410/tcp   # HiQ License Manager
+hiq               1410/udp   # HiQ License Manager
+af                1411/tcp   # AudioFile
+af                1411/udp   # AudioFile
+innosys           1412/tcp   #
+innosys           1412/udp   #
+innosys-acl       1413/tcp   #
+innosys-acl       1413/udp   #
+ibm-mqseries      1414/tcp   # IBM MQSeries
+ibm-mqseries      1414/udp   # IBM MQSeries
+dbstar            1415/tcp   #
+dbstar            1415/udp   #
+novell-lu6.2      1416/tcp   # Novell LU6.2
+novell-lu6.2      1416/udp   # Novell LU6.2
+timbuktu-srv1     1417/tcp   # Timbuktu Service 1 Port
+timbuktu-srv1     1417/udp   # Timbuktu Service 1 Port
+timbuktu-srv2     1418/tcp   # Timbuktu Service 2 Port
+timbuktu-srv2     1418/udp   # Timbuktu Service 2 Port
+timbuktu-srv3     1419/tcp   # Timbuktu Service 3 Port
+timbuktu-srv3     1419/udp   # Timbuktu Service 3 Port
+timbuktu-srv4     1420/tcp   # Timbuktu Service 4 Port
+timbuktu-srv4     1420/udp   # Timbuktu Service 4 Port
+gandalf-lm        1421/tcp   # Gandalf License Manager
+gandalf-lm        1421/udp   # Gandalf License Manager
+autodesk-lm       1422/tcp   # Autodesk License Manager
+autodesk-lm       1422/udp   # Autodesk License Manager
+essbase           1423/tcp   # Essbase Arbor Software
+essbase           1423/udp   # Essbase Arbor Software
+hybrid            1424/tcp   # Hybrid Encryption Protocol
+hybrid            1424/udp   # Hybrid Encryption Protocol
+zion-lm           1425/tcp   # Zion Software License Manager
+zion-lm           1425/udp   # Zion Software License Manager
+sas-1             1426/tcp   # Satellite-data Acquisition System 1
+sas-1             1426/udp   # Satellite-data Acquisition System 1
+mloadd            1427/tcp   # mloadd monitoring tool
+mloadd            1427/udp   # mloadd monitoring tool
+informatik-lm     1428/tcp   # Informatik License Manager
+informatik-lm     1428/udp   # Informatik License Manager
+nms               1429/tcp   # Hypercom NMS
+nms               1429/udp   # Hypercom NMS
+tpdu              1430/tcp   # Hypercom TPDU
+tpdu              1430/udp   # Hypercom TPDU
+rgtp              1431/tcp   # Reverse Gossip Transport
+rgtp              1431/udp   # Reverse Gossip Transport
+blueberry-lm      1432/tcp   # Blueberry Software License Manager
+blueberry-lm      1432/udp   # Blueberry Software License Manager
+ms-sql-s          1433/tcp   # Microsoft-SQL-Server
+ms-sql-s          1433/udp   # Microsoft-SQL-Server
+ms-sql-m          1434/tcp   # Microsoft-SQL-Monitor
+ms-sql-m          1434/udp   # Microsoft-SQL-Monitor
+ibm-cics          1435/tcp   #
+ibm-cics          1435/udp   #
+sas-2             1436/tcp   # Satellite-data Acquisition System 2
+sas-2             1436/udp   # Satellite-data Acquisition System 2
+tabula            1437/tcp   #
+tabula            1437/udp   #
+eicon-server      1438/tcp   # Eicon Security Agent/Server
+eicon-server      1438/udp   # Eicon Security Agent/Server
+eicon-x25         1439/tcp   # Eicon X25/SNA Gateway
+eicon-x25         1439/udp   # Eicon X25/SNA Gateway
+eicon-slp         1440/tcp   # Eicon Service Location Protocol
+eicon-slp         1440/udp   # Eicon Service Location Protocol
+cadis-1           1441/tcp   # Cadis License Management
+cadis-1           1441/udp   # Cadis License Management
+cadis-2           1442/tcp   # Cadis License Management
+cadis-2           1442/udp   # Cadis License Management
+ies-lm            1443/tcp   # Integrated Engineering Software
+ies-lm            1443/udp   # Integrated Engineering Software
+marcam-lm         1444/tcp   # Marcam License Management
+marcam-lm         1444/udp   # Marcam License Management
+proxima-lm        1445/tcp   # Proxima License Manager
+proxima-lm        1445/udp   # Proxima License Manager
+ora-lm            1446/tcp   # Optical Research Associates License Manager
+ora-lm            1446/udp   # Optical Research Associates License Manager
+apri-lm           1447/tcp   # Applied Parallel Research LM
+apri-lm           1447/udp   # Applied Parallel Research LM
+oc-lm             1448/tcp   # OpenConnect License Manager
+oc-lm             1448/udp   # OpenConnect License Manager
+peport            1449/tcp   #
+peport            1449/udp   #
+dwf               1450/tcp   # Tandem Distributed Workbench Facility
+dwf               1450/udp   # Tandem Distributed Workbench Facility
+infoman           1451/tcp   # IBM Information Management
+infoman           1451/udp   # IBM Information Management
+gtegsc-lm         1452/tcp   # GTE Government Systems License Man
+gtegsc-lm         1452/udp   # GTE Government Systems License Man
+genie-lm          1453/tcp   # Genie License Manager
+genie-lm          1453/udp   # Genie License Manager
+interhdl_elmd     1454/tcp   # interHDL License Manager
+interhdl_elmd     1454/udp   # interHDL License Manager
+esl-lm            1455/tcp   # ESL License Manager
+esl-lm            1455/udp   # ESL License Manager
+dca               1456/tcp   #
+dca               1456/udp   #
+valisys-lm        1457/tcp   # Valisys License Manager
+valisys-lm        1457/udp   # Valisys License Manager
+nrcabq-lm         1458/tcp   # Nichols Research Corp.
+nrcabq-lm         1458/udp   # Nichols Research Corp.
+proshare1         1459/tcp   # Proshare Notebook Application
+proshare1         1459/udp   # Proshare Notebook Application
+proshare2         1460/tcp   # Proshare Notebook Application
+proshare2         1460/udp   # Proshare Notebook Application
+ibm_wrless_lan    1461/tcp   # IBM Wireless LAN
+ibm_wrless_lan    1461/udp   # IBM Wireless LAN
+world-lm          1462/tcp   # World License Manager
+world-lm          1462/udp   # World License Manager
+nucleus           1463/tcp   #
+nucleus           1463/udp   #
+msl_lmd           1464/tcp   # MSL License Manager
+msl_lmd           1464/udp   # MSL License Manager
+pipes             1465/tcp   # Pipes Platform
+pipes             1465/udp   #
+oceansoft-lm      1466/tcp   # Ocean Software License Manager
+oceansoft-lm      1466/udp   # Ocean Software License Manager
+csdmbase          1467/tcp   #
+csdmbase          1467/udp   #
+csdm              1468/tcp   #
+csdm              1468/udp   #
+aal-lm            1469/tcp   # Active Analysis Limited License Manager
+aal-lm            1469/udp   # Active Analysis Limited License Manager
+uaiact            1470/tcp   # Universal Analytics
+uaiact            1470/udp   # Universal Analytics
+csdmbase          1471/tcp   #
+csdmbase          1471/udp   #
+csdm              1472/tcp   #
+csdm              1472/udp   #
+openmath          1473/tcp   #
+openmath          1473/udp   #
+telefinder        1474/tcp   #
+telefinder        1474/udp   #
+taligent-lm       1475/tcp   # Taligent License Manager
+taligent-lm       1475/udp   # Taligent License Manager
+clvm-cfg          1476/tcp   #
+clvm-cfg          1476/udp   #
+ms-sna-server     1477/tcp   #
+ms-sna-server     1477/udp   #
+ms-sna-base       1478/tcp   #
+ms-sna-base       1478/udp   #
+dberegister       1479/tcp   #
+dberegister       1479/udp   #
+pacerforum        1480/tcp   #
+pacerforum        1480/udp   #
+airs              1481/tcp   #
+airs              1481/udp   #
+miteksys-lm       1482/tcp   # Miteksys License Manager
+miteksys-lm       1482/udp   # Miteksys License Manager
+afs               1483/tcp   # AFS License Manager
+afs               1483/udp   # AFS License Manager
+confluent         1484/tcp   # Confluent License Manager
+confluent         1484/udp   # Confluent License Manager
+lansource         1485/tcp   #
+lansource         1485/udp   #
+nms_topo_serv     1486/tcp   #
+nms_topo_serv     1486/udp   #
+localinfosrvr     1487/tcp   #
+localinfosrvr     1487/udp   #
+docstor           1488/tcp   #
+docstor           1488/udp   #
+dmdocbroker       1489/tcp   #
+dmdocbroker       1489/udp   #
+insitu-conf       1490/tcp   #
+insitu-conf       1490/udp   #
+anynetgateway     1491/tcp   #
+anynetgateway     1491/udp   #
+stone-design-1    1492/tcp   #
+stone-design-1    1492/udp   #
+netmap_lm         1493/tcp   #
+netmap_lm         1493/udp   #
+citrix-ica        1494/tcp   #
+citrix-ica        1494/udp   #
+cvc               1495/tcp   #
+cvc               1495/udp   #
+liberty-lm        1496/tcp   #
+liberty-lm        1496/udp   #
+rfx-lm            1497/tcp   #
+rfx-lm            1497/udp   #
+watcom-sql        1498/tcp   #
+watcom-sql        1498/udp   #
+fhc               1499/tcp   # Federico Heinz Consultora
+fhc               1499/udp   # Federico Heinz Consultora
+vlsi-lm           1500/tcp   # VLSI License Manager
+vlsi-lm           1500/udp   # VLSI License Manager
+sas-3             1501/tcp   # Satellite-data Acquisition System 3
+sas-3             1501/udp   # Satellite-data Acquisition System 3
+shivadiscovery    1502/tcp   # Shiva
+shivadiscovery    1502/udp   # Shiva
+imtc-mcs          1503/tcp   # Databeam
+imtc-mcs          1503/udp   # Databeam
+evb-elm           1504/tcp   # EVB Software Engineering License Manager
+evb-elm           1504/udp   # EVB Software Engineering License Manager
+funkproxy         1505/tcp   # Funk Software, Inc.
+funkproxy         1505/udp   # Funk Software, Inc.
+utcd              1506/tcp   # Universal Time daemon (utcd)
+utcd              1506/udp   # Universal Time daemon (utcd)
+symplex           1507/tcp   #
+symplex           1507/udp   #
+diagmond          1508/tcp   #
+diagmond          1508/udp   #
+robcad-lm         1509/tcp   # Robcad, Ltd. License Manager
+robcad-lm         1509/udp   # Robcad, Ltd. License Manager
+mvx-lm            1510/tcp   # Midland Valley Exploration Ltd. Lic. Man.
+mvx-lm            1510/udp   # Midland Valley Exploration Ltd. Lic. Man.
+3l-l1             1511/tcp   #
+3l-l1             1511/udp   #
+wins              1512/tcp   # Microsoft's Windows Internet Name Service
+wins              1512/udp   # Microsoft's Windows Internet Name Service
+fujitsu-dtc       1513/tcp   # Fujitsu Systems Business of America, Inc
+fujitsu-dtc       1513/udp   # Fujitsu Systems Business of America, Inc
+fujitsu-dtcns     1514/tcp   # Fujitsu Systems Business of America, Inc
+fujitsu-dtcns     1514/udp   # Fujitsu Systems Business of America, Inc
+ifor-protocol     1515/tcp   #
+ifor-protocol     1515/udp   #
+vpad              1516/tcp   # Virtual Places Audio data
+vpad              1516/udp   # Virtual Places Audio data
+vpac              1517/tcp   # Virtual Places Audio control
+vpac              1517/udp   # Virtual Places Audio control
+vpvd              1518/tcp   # Virtual Places Video data
+vpvd              1518/udp   # Virtual Places Video data
+vpvc              1519/tcp   # Virtual Places Video control
+vpvc              1519/udp   # Virtual Places Video control
+atm-zip-office    1520/tcp   # atm zip office
+atm-zip-office    1520/udp   # atm zip office
+oracle            1521/tcp   # Oracle Database
+ncube-lm          1521/udp   # nCube License Manager
+rna-lm            1522/tcp   # Ricardo North America License Manager
+rna-lm            1522/udp   # Ricardo North America License Manager
+cichild-lm        1523/tcp   #
+cichild-lm        1523/udp   #
+ingreslock        1524/tcp   # ingres
+ingreslock        1524/udp   # ingres
+orasrv            1525/tcp   # oracle or Prospero Directory Service non-priv
+orasrv            1525/udp   # oracle
+pdap-np           1526/tcp   # Prospero Data Access Prot non-priv
+pdap-np           1526/udp   # Prospero Data Access Prot non-priv
+tlisrv            1527/tcp   # oracle
+tlisrv            1527/udp   # oracle
+mciautoreg        1528/tcp   #
+mciautoreg        1528/udp   #
+support           1529/tcp   # prmsd gnatsd	# cygnus bug tracker
+coauthor          1529/udp   # oracle
+rap-service       1530/tcp   #
+rap-service       1530/udp   #
+rap-listen        1531/tcp   #
+rap-listen        1531/udp   #
+miroconnect       1532/tcp   #
+miroconnect       1532/udp   #
+virtual-places    1533/tcp   # Virtual Places Software
+virtual-places    1533/udp   # Virtual Places Software
+micromuse-lm      1534/tcp   #
+micromuse-lm      1534/udp   #
+ampr-info         1535/tcp   #
+ampr-info         1535/udp   #
+ampr-inter        1536/tcp   #
+ampr-inter        1536/udp   #
+sdsc-lm           1537/tcp   #
+sdsc-lm           1537/udp   #
+3ds-lm            1538/tcp   #
+3ds-lm            1538/udp   #
+intellistor-lm    1539/tcp   # Intellistor License Manager
+intellistor-lm    1539/udp   # Intellistor License Manager
+rds               1540/tcp   #
+rds               1540/udp   #
+rds2              1541/tcp   #
+rds2              1541/udp   #
+gridgen-elmd      1542/tcp   #
+gridgen-elmd      1542/udp   #
+simba-cs          1543/tcp   #
+simba-cs          1543/udp   #
+aspeclmd          1544/tcp   #
+aspeclmd          1544/udp   #
+vistium-share     1545/tcp   #
+vistium-share     1545/udp   #
+abbaccuray        1546/tcp   #
+abbaccuray        1546/udp   #
+laplink           1547/tcp   #
+laplink           1547/udp   #
+axon-lm           1548/tcp   # Axon License Manager
+axon-lm           1548/udp   # Axon License Manager
+shivahose         1549/tcp   # Shiva Hose
+shivasound        1549/udp   # Shiva Sound
+3m-image-lm       1550/tcp   # Image Storage license manager 3M Company
+3m-image-lm       1550/udp   # Image Storage license manager 3M Company
+hecmtl-db         1551/tcp   #
+hecmtl-db         1551/udp   #
+pciarray          1552/tcp   #
+pciarray          1552/udp   #
+issd              1600/tcp   #
+issd              1600/udp   #
+radius            1645/udp   # radius authentication
+radacct           1646/udp   # radius accounting
+nkd               1650/tcp   #
+nkd               1650/udp   #
+shiva_confsrvr    1651/tcp   #
+shiva_confsrvr    1651/udp   #
+xnmp              1652/tcp   #
+xnmp              1652/udp   #
+netview-aix-1     1661/tcp   #
+netview-aix-1     1661/udp   #
+netview-aix-2     1662/tcp   #
+netview-aix-2     1662/udp   #
+netview-aix-3     1663/tcp   #
+netview-aix-3     1663/udp   #
+netview-aix-4     1664/tcp   #
+netview-aix-4     1664/udp   #
+netview-aix-5     1665/tcp   #
+netview-aix-5     1665/udp   #
+netview-aix-6     1666/tcp   #
+netview-aix-6     1666/udp   #
+netview-aix-7     1667/tcp   #
+netview-aix-7     1667/udp   #
+netview-aix-8     1668/tcp   #
+netview-aix-8     1668/udp   #
+netview-aix-9     1669/tcp   #
+netview-aix-9     1669/udp   #
+netview-aix-10    1670/tcp   #
+netview-aix-10    1670/udp   #
+netview-aix-11    1671/tcp   #
+netview-aix-11    1671/udp   #
+netview-aix-12    1672/tcp   #
+netview-aix-12    1672/udp   #
+CarbonCopy        1680/tcp   #
+L2TP              1701/udp   #
+H.323/Q.931       1720/tcp   # Interactive media
+pptp              1723/tcp   # Point-to-point tunnelling protocol
+wms               1755/tcp   # Windows media service
+radius            1812/udp   # RADIUS authentication protocol (RFC 2138)
+radacct           1813/udp   # RADIUS accounting protocol (RFC 2139)
+pcm               1827/tcp   # PCM Agent (AutoSecure Policy Compliance Manager
+UPnP              1900/tcp   # Universal PnP
+UPnP              1900/udp   # Universal PnP
+bigbrother        1984/tcp   # Big Brother monitoring server - www.bb4.com
+licensedaemon     1986/tcp   # cisco license management
+licensedaemon     1986/udp   # cisco license management
+tr-rsrb-p1        1987/tcp   # cisco RSRB Priority 1 port
+tr-rsrb-p1        1987/udp   # cisco RSRB Priority 1 port
+tr-rsrb-p2        1988/tcp   # cisco RSRB Priority 2 port
+tr-rsrb-p2        1988/udp   # cisco RSRB Priority 2 port
+tr-rsrb-p3        1989/tcp   # cisco RSRB Priority 3 port
+tr-rsrb-p3        1989/udp   # cisco RSRB Priority 3 port
+stun-p1           1990/tcp   # cisco STUN Priority 1 port
+stun-p1           1990/udp   # cisco STUN Priority 1 port
+stun-p2           1991/tcp   # cisco STUN Priority 2 port
+stun-p2           1991/udp   # cisco STUN Priority 2 port
+stun-p3           1992/tcp   # cisco STUN Priority 3 port
+stun-p3           1992/udp   # cisco STUN Priority 3 port
+snmp-tcp-port     1993/tcp   # cisco SNMP TCP port
+snmp-tcp-port     1993/udp   # cisco SNMP TCP port
+stun-port         1994/tcp   # cisco serial tunnel port
+stun-port         1994/udp   # cisco serial tunnel port
+perf-port         1995/tcp   # cisco perf port
+perf-port         1995/udp   # cisco perf port
+tr-rsrb-port      1996/tcp   # cisco Remote SRB port
+tr-rsrb-port      1996/udp   # cisco Remote SRB port
+gdp-port          1997/tcp   # cisco Gateway Discovery Protocol
+gdp-port          1997/udp   # cisco Gateway Discovery Protocol
+x25-svc-port      1998/tcp   # cisco X.25 service (XOT)
+x25-svc-port      1998/udp   # cisco X.25 service (XOT)
+tcp-id-port       1999/tcp   # cisco identification port
+tcp-id-port       1999/udp   # cisco identification port
+callbook          2000/tcp   #
+callbook          2000/udp   #
+dc                2001/tcp   # or nfr20 web queries
+wizard            2001/udp   # curry
+globe             2002/tcp   #
+globe             2002/udp   #
+cfingerd          2003/tcp   # GNU finger
+mailbox           2004/tcp   #
+emce              2004/udp   # CCWS mm conf
+deslogin          2005/tcp   # encrypted symmetric telnet/login
+oracle            2005/udp   #
+invokator         2006/tcp   #
+raid-cc           2006/udp   # raid
+dectalk           2007/tcp   #
+raid-am           2007/udp   #
+conf              2008/tcp   #
+terminaldb        2008/udp   #
+news              2009/tcp   #
+whosockami        2009/udp   #
+search            2010/tcp   #  Or nfr411
+pipe_server       2010/udp   # Also used by NFR
+raid-cc           2011/tcp   # raid
+servserv          2011/udp   #
+ttyinfo           2012/tcp   #
+raid-ac           2012/udp   #
+raid-am           2013/tcp   #
+raid-cd           2013/udp   #
+troff             2014/tcp   #
+raid-sf           2014/udp   #
+cypress           2015/tcp   #
+raid-cs           2015/udp   #
+bootserver        2016/tcp   #
+bootserver        2016/udp   #
+cypress-stat      2017/tcp   #
+bootclient        2017/udp   #
+terminaldb        2018/tcp   #
+rellpack          2018/udp   #
+whosockami        2019/tcp   #
+about             2019/udp   #
+xinupageserver    2020/tcp   #
+xinupageserver    2020/udp   #
+servexec          2021/tcp   #
+xinuexpansion1    2021/udp   #
+down              2022/tcp   #
+xinuexpansion2    2022/udp   #
+xinuexpansion3    2023/tcp   #
+xinuexpansion3    2023/udp   #
+xinuexpansion4    2024/tcp   #
+xinuexpansion4    2024/udp   #
+ellpack           2025/tcp   #
+xribs             2025/udp   #
+scrabble          2026/tcp   #
+scrabble          2026/udp   #
+shadowserver      2027/tcp   #
+shadowserver      2027/udp   #
+submitserver      2028/tcp   #
+submitserver      2028/udp   #
+device2           2030/tcp   #
+device2           2030/udp   #
+blackboard        2032/tcp   #
+blackboard        2032/udp   #
+glogger           2033/tcp   #
+glogger           2033/udp   #
+scoremgr          2034/tcp   #
+scoremgr          2034/udp   #
+imsldoc           2035/tcp   #
+imsldoc           2035/udp   #
+objectmanager     2038/tcp   #
+objectmanager     2038/udp   #
+lam               2040/tcp   #
+lam               2040/udp   #
+interbase         2041/tcp   #
+interbase         2041/udp   #
+isis              2042/tcp   #
+isis              2042/udp   #
+isis-bcast        2043/tcp   #
+isis-bcast        2043/udp   #
+rimsl             2044/tcp   #
+rimsl             2044/udp   #
+cdfunc            2045/tcp   #
+cdfunc            2045/udp   #
+sdfunc            2046/tcp   #
+sdfunc            2046/udp   #
+dls               2047/tcp   #
+dls               2047/udp   #
+dls-monitor       2048/tcp   #
+dls-monitor       2048/udp   #
+nfs               2049/tcp   # networked file system
+nfs               2049/udp   # networked file system
+dnet-keyproxy     2064/tcp  # A closed-source client for solving the RSA cryptographic challenge. This is the keyblock proxy port.
+knetd             2053/tcp   #
+dlsrpn            2065/tcp   # Data Link Switch Read Port Number
+dlsrpn            2065/udp   # Data Link Switch Read Port Number
+dlswpn            2067/tcp   # Data Link Switch Write Port Number
+dlswpn            2067/udp   # Data Link Switch Write Port Number
+advocentkvm       2068/tcp   # Advocent KVM Server
+zephyr-clt        2103/udp   # Zephyr serv-hm connection
+zephyr-hm         2104/udp   # Zephyr hostmanager
+eklogin           2105/tcp   # Kerberos (v4) encrypted rlogin
+eklogin           2105/udp   # Kerberos (v4) encrypted rlogin
+ekshell           2106/tcp   # Kerberos (v4) encrypted rshell
+ekshell           2106/udp   # Kerberos (v4) encrypted rshell
+rkinit            2108/tcp   # Kerberos (v4) remote initialization
+rkinit            2108/udp   # Kerberos (v4) remote initialization
+kx                2111/tcp   # X over kerberos
+kip               2112/tcp   # IP over kerberos
+kauth             2120/tcp   # Remote kauth
+ats               2201/tcp   # Advanced Training System Program
+ats               2201/udp   # Advanced Training System Program
+ivs-video         2232/tcp   # IVS Video default
+ivs-video         2232/udp   # IVS Video default
+ivsd              2241/tcp   # IVS Daemon
+ivsd              2241/udp   # IVS Daemon
+compaqdiag        2301/tcp   # Compaq remote diagnostic/management
+pehelp            2307/tcp   #
+pehelp            2307/udp   #
+cvspserver        2401/tcp   # CVS network server
+cvspserver        2401/udp   # CVS network server
+venus             2430/tcp   #
+venus             2430/udp   #
+venus-se          2431/tcp   #
+venus-se          2431/udp   #
+codasrv           2432/tcp   #
+codasrv           2432/udp   #
+codasrv-se        2433/tcp   #
+codasrv-se        2433/udp   #
+rtsserv           2500/tcp   # Resource Tracking system server
+rtsserv           2500/udp   # Resource Tracking system server
+rtsclient         2501/tcp   # Resource Tracking system client
+rtsclient         2501/udp   # Resource Tracking system client
+hp-3000-telnet    2564/tcp   # HP 3000 NS/VT block mode telnet
+zebrasrv          2600/tcp   # zebra service
+zebra             2601/tcp   # zebra vty
+ripd              2602/tcp   # RIPd vty
+ripngd            2603/tcp   # RIPngd vty
+ospfd             2604/tcp   # OSPFd vty
+bgpd              2605/tcp   # BGPd vty
+webster           2627/tcp   # Network dictionary
+webster           2627/udp   #
+sybase            2638/tcp   # Sybase database
+listen            2766/tcp   # System V listener port
+www-dev           2784/tcp   # world wide web - development
+www-dev           2784/udp   # world wide web - development
+extensisportfolio 2903/tcp   # Portfolio Server by Extensis Product Group
+iss-realsec       2998/tcp   # ISS RealSecure IDS Remote Console Admin port
+ppp               3000/tcp   # User-level ppp daemon, or chili!soft asp
+nessusd           3001/tcp   # Nessus Security Scanner (www.nessus.org) Daemon or chili!soft asp
+deslogin          3005/tcp   # encrypted symmetric telnet/login
+deslogind         3006/tcp   #
+cfs               3049/tcp   # cryptographic file system (nfs) (proposed)
+cfs               3049/udp   # cryptographic file system (nfs)
+PowerChute        3052/tcp
+dnet-tstproxy     3064/tcp   # distributed.net (a closed source crypto-cracking project) proxy test port
+sj3               3086/tcp   # SJ3 (kanji input)
+squid-http        3128/tcp   #
+squid-ipc         3130/udp   #
+vmodem            3141/tcp   #
+vmodem            3141/udp   #
+ccmail            3264/tcp   # cc:mail/lotus
+ccmail            3264/udp   # cc:mail/lotus
+globalcatLDAP     3268/tcp   # Global Catalog LDAP
+globalcatLDAPssl  3269/tcp   # Global Catalog LDAP over ssl
+meetingmaker      3292/tcp   # Meeting maker time management software
+mysql             3306/tcp   # mySQL
+dec-notes         3333/tcp   # DEC Notes
+dec-notes         3333/udp   # DEC Notes
+msdtc             3372/tcp   # MS distributed transaction coordinator
+ms-term-serv      3389/tcp   # Microsoft Remote Display Protocol
+squid-snmp        3401/udp   # Squid proxy SNMP port
+bmap              3421/tcp   # Bull Apprise portmapper
+bmap              3421/udp   # Bull Apprise portmapper
+prsvp             3455/tcp   # RSVP Port
+prsvp             3455/udp   # RSVP Port
+vat               3456/tcp   # VAT default data
+IISrpc-or-vat     3456/udp   # also VAT default data
+vat-control       3457/tcp   # VAT default control
+vat-control       3457/udp   # VAT default control
+track             3462/tcp   # software distribution
+udt_os            3900/tcp   # Unidata UDT OS
+udt_os            3900/udp   # Unidata UDT OS
+mapper-nodemgr    3984/tcp   # MAPPER network node manager
+mapper-nodemgr    3984/udp   # MAPPER network node manager
+mapper-mapethd    3985/tcp   # MAPPER TCP/IP server
+mapper-mapethd    3985/udp   # MAPPER TCP/IP server
+mapper-ws_ethd    3986/tcp   # MAPPER workstation server
+mapper-ws_ethd    3986/udp   # MAPPER workstation server
+remoteanything    3996/udp   # neoworx remote-anything slave daemon
+remoteanything    3997/udp   # neoworx remote-anything master daemon
+remoteanything    3998/udp   # neoworx remote-anything reserved
+remoteanything    3999/tcp   # neoworx remote-anything slave file browser
+remoteanything    4000/tcp   # neoworx remote-anything slave remote control
+icq               4000/udp   # AOL ICQ instant messaging clent-server communication
+netcheque         4008/tcp   # NetCheque accounting
+netcheque         4008/udp   # NetCheque accounting
+lockd             4045/tcp   #
+lockd             4045/udp   # NFS lock daemon/manager
+nuts_dem          4132/tcp   # NUTS Daemon
+nuts_dem          4132/udp   # NUTS Daemon
+nuts_bootp        4133/tcp   # NUTS Bootp Server
+nuts_bootp        4133/udp   # NUTS Bootp Server
+wincim            4144/tcp   # pc windows compuserve.com protocol
+rwhois            4321/tcp   # Remote Who Is
+rwhois            4321/udp   # Remote Who Is
+msql              4333/tcp   # mini-sql server
+unicall           4343/tcp   #
+unicall           4343/udp   #
+krb524            4444/tcp   # Kerberos 5 to 4 ticket xlator
+krb524            4444/udp   #
+proxy-plus        4480/tcp   # Proxy+ HTTP proxy port
+sae-urn           4500/tcp   #
+sae-urn           4500/udp   #
+fax               4557/tcp   # FlexFax FAX transmission service
+hylafax           4559/tcp   # HylaFAX client-server protocol
+rfa               4672/tcp   # remote file access server
+rfa               4672/udp   # remote file access server
+squid-htcp        4827/udp   # Squid proxy HTCP port
+radmin            4899/tcp   # Radmin (www.radmin.com) remote PC control software
+maybeveritas      4987/tcp   #
+maybeveritas      4998/tcp   #
+UPnP              5000/tcp   # Universal PnP, also Free Internet Chess Server
+UPnP              5000/udp   # also complex-main
+commplex-link     5001/tcp   #
+commplex-link     5001/udp   #
+rfe               5002/tcp   # Radio Free Ethernet
+rfe               5002/udp   # Radio Free Ethernet
+filemaker         5003/tcp   # Filemaker Server - http://www.filemaker.com/ti/104289.html
+filemaker         5003/udp   # Filemaker Server - http://www.filemaker.com/ti/104289.html
+telelpathstart    5010/tcp   #
+telelpathstart    5010/udp   #
+telelpathattack   5011/tcp   #
+telelpathattack   5011/udp   #
+yahoo_msg         5050/tcp   # yahoo messenger
+yahoo_msg         5050/udp   # yahoo messenger
+admd              5100/tcp   # (chili!soft asp admin port)
+admdog            5101/tcp   # (chili!soft asp)
+admeng            5102/tcp   # (chili!soft asp)
+rmonitor_secure   5145/tcp   #
+rmonitor_secure   5145/udp   #
+aol               5190/tcp   # America-Online.  Also can be used by ICQ
+aol               5190/udp   # America-Online.
+aol-1             5191/tcp   # AmericaOnline1
+aol-1             5191/udp   # AmericaOnline1
+aol-2             5192/tcp   # AmericaOnline2
+aol-2             5192/udp   # AmericaOnline2
+aol-3             5193/tcp   # AmericaOnline3
+aol-3             5193/udp   # AmericaOnline3
+sgi-dgl           5232/tcp   # SGI Distributed Graphics
+padl2sim          5236/tcp   #
+padl2sim          5236/udp   #
+hacl-hb           5300/tcp   # HA cluster heartbeat
+hacl-hb           5300/udp   # HA cluster heartbeat
+hacl-gs           5301/tcp   # HA cluster general services
+hacl-gs           5301/udp   # HA cluster general services
+hacl-cfg          5302/tcp   # HA cluster configuration
+hacl-cfg          5302/udp   # HA cluster configuration
+hacl-probe        5303/tcp   # HA cluster probing
+hacl-probe        5303/udp   # HA cluster probing
+hacl-local        5304/tcp   #
+hacl-local        5304/udp   #
+hacl-test         5305/tcp   #
+hacl-test         5305/udp   #
+cfengine          5308/tcp   #
+cfengine          5308/udp   #
+pcduo-old         5400/tcp   # RemCon PC-Duo - old port
+pcduo             5405/tcp   # RemCon PC-Duo - new port
+connect-proxy     5490/tcp   # Many HTTP CONNECT proxies
+postgres          5432/tcp   # postgres database server
+securid           5500/udp   # SecurID
+secureidprop      5510/tcp   # ACE/Server services
+sdlog             5520/tcp   # ACE/Server services
+sdserv            5530/tcp   # ACE/Server services
+sdreport          5540/tcp   # ACE/Server services
+sdxauthd          5540/udp   # ACE/Server services
+sdadmind          5550/tcp   # ACE/Server services
+freeciv           5555/tcp   #
+rplay             5555/udp   #
+pcanywheredata    5631/tcp   #
+pcanywherestat    5632/tcp   #
+pcanywherestat    5632/udp   #
+canna             5680/tcp   # Canna (Japanese Input)
+proshareaudio     5713/tcp   # proshare conf audio
+proshareaudio     5713/udp   # proshare conf audio
+prosharevideo     5714/tcp   # proshare conf video
+prosharevideo     5714/udp   # proshare conf video
+prosharedata      5715/tcp   # proshare conf data
+prosharedata      5715/udp   # proshare conf data
+prosharerequest   5716/tcp   # proshare conf request
+prosharerequest   5716/udp   # proshare conf request
+prosharenotify    5717/tcp   # proshare conf notify
+prosharenotify    5717/udp   # proshare conf notify
+vnc-http          5800/tcp   # Virtual Network Computer HTTP Access, display 0
+vnc-http-1        5801/tcp   # Virtual Network Computer HTTP Access, display 1
+vnc-http-2        5802/tcp   # Virtual Network Computer HTTP Access, display 2
+vnc-http-3        5803/tcp   # Virtual Network Computer HTTP Access, display 3
+vnc               5900/tcp   # Virtual Network Computer display 0
+vnc-1             5901/tcp   # Virtual Network Computer display 1
+vnc-2             5902/tcp   # Virtual Network Computer display 2
+vnc-3             5903/tcp   # Virtual Network Computer display 3
+ncd-pref-tcp      5977/tcp   # NCD preferences tcp port
+ncd-diag-tcp      5978/tcp   # NCD diagnostic tcp port
+ncd-conf-tcp      5979/tcp   # NCD configuration tcp port
+ncd-pref          5997/tcp   # NCD preferences telnet port
+ncd-diag          5998/tcp   # NCD diagnostic telnet port
+ncd-conf          5999/tcp   # NCD configuration telnet port
+X11               6000/tcp   # X Window server
+X11:1             6001/tcp   # X Window server
+X11:2             6002/tcp   # X Window server
+X11:3             6003/tcp   # X Window server
+X11:4             6004/tcp   # X Window server
+X11:5             6005/tcp   # X Window server
+X11:6             6006/tcp   # X Window server
+X11:7             6007/tcp   # X Window server
+X11:8             6008/tcp   # X Window server
+X11:9             6009/tcp   # X Window server
+arcserve          6050/tcp   # ARCserve agent
+VeritasBackupExec 6101/tcp   # Backup Exec UNIX and 95/98/ME Aent
+RETS-or-BackupExec 6103/tcp  # Backup Exec Agent Accelerator and Remote Agent also sql server and cisco works blue
+isdninfo          6105/tcp   # isdninfo
+isdninfo          6106/tcp   # i4lmond
+softcm            6110/tcp   # HP SoftBench CM
+softcm            6110/udp   # HP SoftBench CM
+spc               6111/tcp   # HP SoftBench Sub-Process Control
+spc               6111/udp   # HP SoftBench Sub-Process Control
+dtspc             6112/tcp   # CDE subprocess control
+meta-corp         6141/tcp   # Meta Corporation License Manager
+meta-corp         6141/udp   # Meta Corporation License Manager
+aspentec-lm       6142/tcp   # Aspen Technology License Manager
+aspentec-lm       6142/udp   # Aspen Technology License Manager
+watershed-lm      6143/tcp   # Watershed License Manager
+watershed-lm      6143/udp   # Watershed License Manager
+statsci1-lm       6144/tcp   # StatSci License Manager - 1
+statsci1-lm       6144/udp   # StatSci License Manager - 1
+statsci2-lm       6145/tcp   # StatSci License Manager - 2
+statsci2-lm       6145/udp   # StatSci License Manager - 2
+lonewolf-lm       6146/tcp   # Lone Wolf Systems License Manager
+lonewolf-lm       6146/udp   # Lone Wolf Systems License Manager
+montage-lm        6147/tcp   # Montage License Manager
+montage-lm        6147/udp   # Montage License Manager
+ricardo-lm        6148/tcp   # Ricardo North America License Manager
+ricardo-lm        6148/udp   # Ricardo North America License Manager
+gnutella          6346/tcp   # Gnutella file sharing protocol
+crystalreports    6400/tcp   # Seagate Crystal Reports
+crystalenterprise 6401/tcp   # Seagate Crystal Enterprise
+PowerChutePLUS    6547/tcp   #
+PowerChutePLUS    6548/tcp   #
+PowerChutePLUS    6549/udp   #
+netop-rc          6502/tcp   # NetOp Remote Control (by Danware Data A/S)
+netop-rc          6502/udp   # NetOp Remote Control (by Danware Data A/S)
+xdsxdm            6558/tcp   #
+xdsxdm            6558/udp   #
+analogx           6588/tcp   # AnalogX HTTP proxy port
+irc-serv          6666/tcp   # internet relay chat server
+irc               6667/tcp   # Internet Relay Chat
+irc               6668/tcp   # Internet Relay Chat
+acmsoda           6969/tcp   #
+acmsoda           6969/udp   #
+afs3-fileserver   7000/tcp   # file server itself, msdos
+afs3-fileserver   7000/udp   # file server itself
+afs3-callback     7001/tcp   # callbacks to cache managers
+afs3-callback     7001/udp   # callbacks to cache managers
+afs3-prserver     7002/tcp   # users & groups database
+afs3-prserver     7002/udp   # users & groups database
+afs3-vlserver     7003/tcp   # volume location database
+afs3-vlserver     7003/udp   # volume location database
+afs3-kaserver     7004/tcp   # AFS/Kerberos authentication service
+afs3-kaserver     7004/udp   # AFS/Kerberos authentication service
+afs3-volser       7005/tcp   # volume managment server
+afs3-volser       7005/udp   # volume managment server
+afs3-errors       7006/tcp   # error interpretation service
+afs3-errors       7006/udp   # error interpretation service
+afs3-bos          7007/tcp   # basic overseer process
+afs3-bos          7007/udp   # basic overseer process
+afs3-update       7008/tcp   # server-to-server updater
+afs3-update       7008/udp   # server-to-server updater
+afs3-rmtsys       7009/tcp   # remote cache manager service
+afs3-rmtsys       7009/udp   # remote cache manager service
+ups-onlinet       7010/tcp   # onlinet uninterruptable power supplies
+ups-onlinet       7010/udp   # onlinet uninterruptable power supplies
+realserver        7070/tcp
+font-service      7100/tcp   # X Font Service
+font-service      7100/udp   # X Font Service
+fodms             7200/tcp   # FODMS FLIP
+fodms             7200/udp   # FODMS FLIP
+dlip              7201/tcp   #
+dlip              7201/udp   #
+openmanage        7273/tcp   # Dell OpenManage
+icb               7326/tcp   # Internet Citizen's Band
+qaz               7597/tcp   # Quaz trojan worm
+cucme-1           7648/udp   # cucme live video/audio server
+cucme-2           7649/udp   # cucme live video/audio server
+cucme-3           7650/udp   # cucme live video/audio server
+cucme-4           7651/udp   # cucme live video/audio server
+http-alt          8000/tcp   # A common alternative http port
+ajp12             8007/tcp   # Apache JServ Protocol 1.x
+ajp13             8009/tcp   # Apache JServ Protocol 1.3
+http-proxy        8080/tcp   # Common HTTP proxy/second web server port
+blackice-icecap   8081/tcp   # ICECap user console
+blackice-alerts   8082/tcp   # BlackIce Alerts sent to this port
+https-alt         8443/tcp   # Common alternative https port
+sun-answerbook    8888/tcp   # Sun Answerbook HTTP server
+seosload          8892/tcp   # From the new Computer Associates eTrust ACX
+zeus-admin        9090/tcp   # Zeus admin server
+jetdirect         9100/tcp   # HP JetDirect card
+DragonIDSConsole  9111/tcp   # Dragon IDS Console
+ms-sql2000        9152/tcp   #
+man               9535/tcp   #
+man               9535/udp   #
+sd                9876/tcp   # Session Director
+sd                9876/udp   # Session Director
+issa              9991/tcp   # ISS System Scanner Agent
+issc              9992/tcp   # ISS System Scanner Console
+abyss             9999/tcp   # Abyss web server remote web management interface
+snet-sensor-mgmt  10000/tcp  # SecureNet Pro Sensor https management server
+stel              10005/tcp  # Secure telnet
+amanda            10080/udp  # Amanda Backup Util
+amandaidx         10082/tcp  # Amanda indexing
+amidxtape         10083/tcp  # Amanda tape indexing
+pksd              11371/tcp  # PGP Public Key Server
+cce4x             12000/tcp  # ClearCommerce Engine 4.x (www.clearcommerce.com)
+NetBus            12345/tcp  # NetBus backdoor trojan or Trend Micro Office Scan
+NetBus            12346/tcp  # NetBus backdoor trojan
+VeritasNetbackup  13701/tcp  # vmd           server
+VeritasNetbackup  13702/tcp  # ascd          server
+VeritasNetbackup  13705/tcp  # tl8cd         server
+VeritasNetbackup  13706/tcp  # odld          server
+VeritasNetbackup  13708/tcp  # vtlcd         server
+VeritasNetbackup  13709/tcp  # ts8d          server
+VeritasNetbackup  13710/tcp  # tc8d          server
+VeritasNetbackup  13711/tcp  #               server
+VeritasNetbackup  13712/tcp  # tc4d          server
+VeritasNetbackup  13713/tcp  # tl4d          server
+VeritasNetbackup  13714/tcp  # tsdd          server
+VeritasNetbackup  13715/tcp  # tshd          server
+VeritasNetbackup  13716/tcp  # tlmd          server
+VeritasNetbackup  13717/tcp  # tlhcd         server
+VeritasNetbackup  13718/tcp  # lmfcd         server
+VeritasNetbackup  13720/tcp  # bprd          server
+VeritasNetbackup  13721/tcp  # bpdbm         server
+VeritasNetbackup  13722/tcp  # bpjava-msvc   client
+VeritasNetbackup  13782/tcp  # bpcd          client
+VeritasNetbackup  13783/tcp  # vopied        client
+swgps             15126/tcp  # Nortel Java S/WGPS Global Payment Solutions for US credit card authorizations
+subseven          16959/tcp  # Subseven trojan
+isode-dua         17007/tcp  #
+isode-dua         17007/udp  #
+wdbrpc            17185/udp  # vxWorks WDB remote debugging ONCRPC
+kuang2            17300/tcp  # Kuang2 backdoor
+biimenu           18000/tcp  # Beckman Instruments, Inc.
+biimenu           18000/udp  # Beckman Instruments, Inc.
+opsec_cvp         18181/tcp  # Check Point OPSEC
+opsec_ufp         18182/tcp  # Check Point OPSEC
+opsec_sam         18183/tcp  # Check Point OPSEC
+opsec_lea         18184/tcp  # Check Point OPSEC
+opsec_omi         18185/tcp  # Check Point OPSEC
+opsec_ela         18187/tcp  # Check Point OPSEC
+btx               20005/tcp  # xcept4 (Interacts with German Telekom's CEPT videotext service)
+wnn6              22273/tcp  # Wnn6 (Japanese input)
+wnn6_Cn           22289/tcp  # Wnn6 (Chinese input)
+wnn6_Kr           22305/tcp  # Wnn6 (Korean input)
+wnn6_Tw           22321/tcp  # Wnn6 (Taiwanse input)
+hpnpd             22370/tcp  # Hewlett-Packard Network Printer daemon
+hpnpd             22370/udp  # Hewlett-Packard Network Printer daemon
+quake             26000/udp  # Quake game server
+wnn6_DS           26208/tcp  # Wnn6 (Dserver)
+hexen2            26900/udp  # Hexen 2 game server
+halflife          27015/udp  # Half-life game server
+subseven          27374/tcp  # Subseven Windows trojan
+Trinoo_Bcast      27444/udp  # Trinoo distributed attack tool Master
+quakeworld        27500/udp  # Quake world
+Trinoo_Master     27665/tcp  # Trinoo distributed attack tool Master server control port
+quake2            27910/udp  # Quake 2 game server
+quake3            27960/udp  # Quake 3 Arena Server
+heretic2          28910/udp  # Heretic 2 game server
+Trinoo_Register   31335/udp  # Trinoo distributed attack tool Bcast Daemon registration port
+BackOrifice       31337/udp  # cDc Back Orifice remote admin tool
+Elite             31337/tcp  # Sometimes interesting stuff can be found here
+sometimes-rpc3    32770/tcp  # Sometimes an RPC port on my Solaris box
+sometimes-rpc4    32770/udp  # Sometimes an RPC port on my Solaris box
+sometimes-rpc5    32771/tcp  # Sometimes an RPC port on my Solaris box (rusersd)
+sometimes-rpc6    32771/udp  # Sometimes an RPC port on my Solaris box (rusersd)
+sometimes-rpc7    32772/tcp  # Sometimes an RPC port on my Solaris box (status)
+sometimes-rpc8    32772/udp  # Sometimes an RPC port on my Solaris box (status)
+sometimes-rpc9    32773/tcp  # Sometimes an RPC port on my Solaris box (rquotad)
+sometimes-rpc10   32773/udp  # Sometimes an RPC port on my Solaris box (rquotad)
+sometimes-rpc11   32774/tcp  # Sometimes an RPC port on my Solaris box (rusersd)
+sometimes-rpc12   32774/udp  # Sometimes an RPC port on my Solaris box (rusersd)
+sometimes-rpc13   32775/tcp  # Sometimes an RPC port on my Solaris box (status)
+sometimes-rpc14   32775/udp  # Sometimes an RPC port on my Solaris box (status)
+sometimes-rpc15   32776/tcp  # Sometimes an RPC port on my Solaris box (sprayd)
+sometimes-rpc16   32776/udp  # Sometimes an RPC port on my Solaris box (sprayd)
+sometimes-rpc17   32777/tcp  # Sometimes an RPC port on my Solaris box (walld)
+sometimes-rpc18   32777/udp  # Sometimes an RPC port on my Solaris box (walld)
+sometimes-rpc19   32778/tcp  # Sometimes an RPC port on my Solaris box (rstatd)
+sometimes-rpc20   32778/udp  # Sometimes an RPC port on my Solaris box (rstatd)
+sometimes-rpc21   32779/tcp  # Sometimes an RPC port on my Solaris box
+sometimes-rpc22   32779/udp  # Sometimes an RPC port on my Solaris box
+sometimes-rpc23   32780/tcp  # Sometimes an RPC port on my Solaris box
+sometimes-rpc24   32780/udp  # Sometimes an RPC port on my Solaris box
+sometimes-rpc25   32786/tcp  # Sometimes an RPC port (mountd)
+sometimes-rpc26   32786/udp  # Sometimes an RPC port
+sometimes-rpc27   32787/tcp  # Sometimes an RPC port dmispd (DMI Service Provider)
+sometimes-rpc28   32787/udp  # Sometimes an RPC port
+sygatefw          39213/udp  # Sygate Firewall management port version 3.0 build 521 and above
+reachout          43188/tcp
+tinyfw            44334/tcp  # tiny personal firewall admin port
+coldfusion-auth   44442/tcp  # ColdFusion Advanced Security/Siteminder Authentication Port (by Allaire/Netegrity)
+coldfusion-auth   44443/tcp  # ColdFusion Advanced Security/Siteminder Authentication Port (by Allaire/Netegrity)
+ciscopop          45000/udp  # Cisco Postoffice Protocol for Cisco Secure IDS
+dbbrowse          47557/tcp  # Databeam Corporation
+dbbrowse          47557/udp  # Databeam Corporation
+compaqdiag        49400/tcp  # Compaq Web-based management
+bo2k              54320/tcp  # Back Orifice 2K Default Port
+bo2k              54321/udp  # Back Orifice 2K Default Port
+netprowler-manager 61439/tcp
+netprowler-manager2 61440/tcp
+netprowler-sensor 61441/tcp
+pcanywhere        65301/tcp