Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I scanned my machine using Nmap and found an open port (5431) is used by the "park-agent" service.

What is the "part-agent" service used for?

share|improve this question

migrated from security.stackexchange.com Sep 1 '11 at 6:56

This question came from our site for Information security professionals.

1  
A service may use any port number to recieve packets. By convention the IANA registers and publishes port numbers. However a rogue process could use any port number without being the service assigned to use the port. –  this.josh Sep 1 '11 at 6:40

3 Answers 3

If its your own system, you could probably run netstat -b (on windows) or netstat -p (on linux) on the system its running on to identify the process- netstat tends to use behaviour to guess what sort of software is running, and what OS, and that description sounds rather generic.

share|improve this answer

The description "Park Agent" will likely just come from the nmap services file, it doens't necessarily mean that that's what's running on the system.

What sort of host is it that you saw it running on? One suggestion I've seen for that port is UPnP

share|improve this answer
    
Can you complete your answer please it's not really an answer at all. How do you figure it comes from nmap services file? If a port is open on the host machine and the scan is run locally, what would nmap need that service for? –  Magpie May 12 at 19:23
    
for the first part of your comment I'm afraid to say my answer is complete, nmap looks up a file called nmap-services and that's the text it shows, which is what OP saw, that's how Nmap works. As to the second part of your comment I'm afraid I don't really see what you mean, so I can't really comment –  Rоry McCune May 12 at 19:33
    
Did you read the question at all? It asked: "What is the "part-agent" service used for?" You did not answer the question. –  Magpie May 12 at 21:46
    
I did read the question although it appears you may not have. The questioner said that they used nmap to scan a host and that it reported port 5431/TCP as open and that nmap said that this is for the "park-agent" service. The reason that nmap said that port 5431/TCP is for the park-agent service, is that it does a lookup on the file nmap-services and matches the port to the relevant line. As my answer says that's why nmap says that it's park-agent. In reality it may well not be that, but nmap reports that based on the file. if you've got a better answer feel free to post it :) –  Rоry McCune May 13 at 8:52

I just use my firewall and tell to ask if I want to allow connections or deny any rogue connections.

And agent port is for your networking company's trouble shooting if you have issues

share|improve this answer
    
This does not seem to answer the question. –  Kevin Panko Sep 1 at 1:35

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.