An instant messaging server supporting the Extensible Messaging and Presence Protocol (XMPP), a protocol used for real-time messaging, is listening on the remote host.

The remote service appears to be a broadcast listener for avast! Management Server (AMS), which is used by avast! Distributed Network Manager (ADNM) as well as avast! Managed Clients for remote deployment and management of avast! antivirus within an enterprise.

The remote host is running MicroWorld eScan Agent, an embedded service used by the MicroWorld antivirus software.

The remote service appears to be an IP Transfer Agent used by Centennial Discovery, or one of its OEM versions.  Discovery is an enterprise tool for network auditing and monitoring, and the IP Transfer Agent (XFERWAN) offers a way for client agents and the application's Control Center to communicate.

The remote host is running Samba, a CIFS/SMB server for Linux and Unix.

By logging into the remote host with the supplied credentials, Nessus was able to obtain the name of the process listening on the remote port.

Note that the method used by this plugin only works for hosts running Linux or AIX.

An Administration Agent for McAfee E-Business Server is listening on the remote host.  McAfee E-Business Server is an enterprise tool for digitally encrypting and signing electronic files, and the Administration Agent allows for remote administration of the E-Business Server on the remote host.

Nessus had detected that the service running on the remote host will answer an HP Printer Job Language (PJL) request, which indicates that it is a printer device running HP JetDirect. By using the PJL protocol, users can submit printing jobs, transfer files to or from the printer, and change configuration settings.

There is a FrontBase FBExec process listening on the remote host. This service brokers connections from network clients to FrontBase database processes running on the remote host.

The remote host is running SQL Anywhere or Adaptive Server Anywhere, a database server from Sybase. 

It is possible to extract its version number from the server's greeting.

The remote host is running Trend Micro ServerProtect for Windows / NetWare, an antivirus / antispyware for Windows and NetWare servers.

An HP LoadRunner Agent is listening on the remote host. This agent enables a LoadRunner Controller to communicate with the LoadRunner Load Generator on the remote host for performance testing. Note that Hewlett-Packard acquired LoadRunner in November 2006 as part of its acquisition of Mercury Interactive.

BrightStor ARCserve Backup for Laptops & Desktops Server (formerly BrightStor Mobile Backup Server), an enterprise class backup solution for remote and mobile Windows-based PCs, is installed on the remote host.  And the service listening on this port is used by the application's Server Explorer to administer ARCserve Backup for Laptops & Desktops Server remotely.

BrightStor ARCserve Backup for Laptops & Desktops Server / BrightStor Mobile Backup Server, an enterprise class backup solution for remote and mobile Windows-based PCs, is installed on the remote host.  And the service listening on this port is used by clients to backup and restore files.

The remote host is running a TCP-based .NET Remoting Channel Service, also known as a 'TCP channel'.  .NET Remoting is an API developed by Microsoft and used for interprocess communications, and a channel service provides the mechanism by which such communications occur.  Two channel services are supplied as part of Microsoft's .NET Framework - a TCP channel, which uses binary payloads, and an HTTP channel, which uses SOAP by default.

The remote host is running a Teredo server. Teredo is a protocol for tunneling IPv6 over UDP, and is used to give nodes the ability to obtain IPv6 connectivity behind IPv4 network address translation (NAT) devices. A Teredo server is a node that is connected to both IPv4 and IPv6 networks.

The remote server appears to be running BrightStor ARCserve Backup, an enterprise class backup program. 

The software's Discovery Service listens for broadcast packets from other BrightStor servers on the local network to learn about their existence.

The remote host is running a collection client service from Novell ZenWorks Asset Management Server, a software and network management solution.

The remote server understands Service Location Protocol (SLP), a protocol that allows network applications to discover the existence, location, and configuration of various services in an enterprise network environment.  A server that understands SLP can either be a service agent (SA), which knows the location of various services, or a directory agent (DA), which acts as a central repository for service location information.

The remote host is running HP OpenView Storage Mirroring Daemon.
This service is part of the HP OpenView Management suite.

The remote server is an H.323 proxy that understands the Skinny protocol, also known as SCCP, for 'Skinny Client Control Protocol'. Skinny is Cisco's proprietary lightweight terminal control protocol used by some VoIP phones to communicate with Cisco CallManager or Asterisk PBX systems.

The remote host is running Pervasive PSQL / Btrieve, a commercial database engine.

The remote host is running a Zabbix server.  Zabbix is an open source network monitoring application, and a Zabbix server is used to collect information from agents on hosts being monitored.

The remote host appears to be running McAfee ePolicy Orchestrator (ePO), a security management solution.

The remote host is running Sun Secure Global Software or Tarantella, a Java-based program for web-enabling applications running on a variety of platforms.

The remote host is running a SOAP server. SOAP, originally an acronym for 'Simple Object Access Protocol', is an XML-based distributed messaging protocol typically implemented over HTTP.

The remote host is running Symantec Antivirus Agent, a real time embedded service used by Symantec SAVCE and Client Security.

The remote host is running a Derby (formerly Cloudscape) Network Server, which allows for network access to the Derby database engine on that host.  Derby itself is a Java-based relational database developed by the Apache Software Foundation.

One or more Java RMI remote objects are listening on the remote host. They may be used by Java applications to invoke methods on those objects remotely.

The remote host is running Macromedia ColdFusion MX, a commercial application server and website development framework.

The remote host is running a Windows RPC service. This service replies to the RPC Bind Request with a Bind Ack response.

However it is not possible to determine the uuid of this service.

The remote host appears to be running an HP OpenView product.

This specific service is an HTTP server.  By sending special requests (version, info, status, ping, services, ...), it is possible to obtain information about the remote host.

The remote host is running a Zend Session Clustering daemon, a component of the Zend Platform used to synchronize session data across a cluster of PHP servers.

The remote host is running either a Firebird or an InterBase database server.

The remote host is running Informix, an online transaction processing (OLTP) data server from IBM.

The remote host is running an RMI registry, which acts as a bootstrap naming service for registering and retrieving remote objects with simple names in the Java Remote Method Invocation (RMI) system.

The remote host is running a monitoring agent from eIQnetworks Enterprise Security Analyzer (ESA), a security information and event management application. 

Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet FortiReporter, and iPolicy Security Reporter.

The remote host is running the server component of Hobbit Monitor, an open source application and network monitoring tool.

The remote host is running a topology server from eIQnetworks Enterprise Security Analyzer (ESA), a security information and event management application.

The remote host is running a license manager for eIQnetworks Enterprise Security Analyzer (ESA), a security information and event management application. 

Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet FortiReporter, and iPolicy Security Reporter.

The remote host is running a syslog service from eIQnetworks Enterprise Security Analyzer (ESA), a security information and event management application. 

Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet FortiReporter, and iPolicy Security Reporter.

The remote host is running an Oracle database server. 

It may be possible to extract the version number of the remote TNS (Transparent Network Substrate) listener by sending a 'VERSION' request to the TNS listener service operating on this port. 

Note that the version of the TNS listener does not necessarily reflect the version of the Oracle database it provides access to.

The remote host is running TrendMicro OfficeScan client, an embedded HTTP server used by TrendMicro antivirus software.

The remote host is running a Rendezvous daemon on the specified port. Rendezvous is a commercial messaging software product used for building distributed applications, and a Rendezvous daemon is the central communications component of the software.

The remote host is running gdbserver, a program which can be used to run the GDB debugger on a different machine than the one which is running the program being debugged.

Since gdbserver offers no authentication whatsoever, an attacker may connect to this port, change the value of the registers and the memory of the process being debugged, and therefore be able to execute arbitrary code on the remote host with the privileges of the process being debugged.

The remote host is running Novell Messenger Messaging Agent, an enterprise instant messaging server for Windows, Linux, and NetWare.

The remote host is running Novell Messenger Archive Agent, an enterprise instant messaging server for Windows, Linux, and NetWare.

The remote host is running SMART Technologies SynchronEyes Teacher. This software allows teachers to remotely control student desktops.

The remote host is running SMART Technologies SynchronEyes Student.
This software allows teacher to remotely control student desktops and/or allow students to join a class.

ID	Name	Severity
25342	XMPP Server Detection	info
25336	avast! Management Server Detection	info
25295	eScan Agent Detection	info
25292	Centennial IP Transfer Agent Detection	info
25240	Samba Server Detection	info
25221	Remote listeners enumeration (Linux / AIX)	info
25089	McAfee E-Business Administration Agent Detection	info
25037	Printer Job Language (PJL) Detection	info
24898	FrontBase FBExec Process Detection	info
24781	Sybase SQL Anywhere Server Detection	info
24679	Trend Micro ServerProtect Detection	info
24326	HP LoadRunner Agent Service Detection	info
24239	ARCserve Backup for Laptops & Desktops Server Admin Service Detection	info
24238	ARCserve Backup for Laptops & Desktops Server Detection	info
24018	TCP Channel Detection	info
23972	Teredo Server Detection	info
23832	CA BrightStor ARCserve Backup Discovery Service Detection	info
23786	Novell ZenWorks Asset Management Server Detection	info
23778	SLP Server Detection (UDP)	info
23777	SLP Server Detection (TCP)	info
23698	HP OpenView Storage Mirroring Server Detection	info
22877	Skinny Server Detection	info
22528	Pervasive PSQL / Btrieve Server Detection	info
22526	Zabbix Server Detection	info
22493	ePolicy Orchestrator Detection	info
22478	Sun Secure Global Software / Tarantella Detection	info
22477	SOAP Server Detection	info
22419	Symantec SAVCE/Client Security Service Detection	info
22410	Derby Network Server Detection	info
22363	RMI Remote Object Detection	info
22361	ColdFusion MX Server Detection	info
22319	MSRPC Service Detection	info
22318	HP OpenView BBC Service Detection	info
22270	Zend Session Clustering Daemon Detection	info
22269	Firebird / InterBase Database Server Detection	info
22228	Informix Detection	info
22227	RMI Registry Detection	info
22195	eIQnetworks Enterprise Security Analyzer Monitoring Agent Detection	info
22180	Hobbit Monitor Daemon Detection	info
22133	eIQnetworks Enterprise Security Analyzer Topology Server Detection	info
22128	eIQnetworks Enterprise Security Analyzer License Manager Detection	info
22126	eIQnetworks Enterprise Security Analyzer Syslog Server Detection	info
22073	Oracle Database Detection	info
21740	Trend Micro OfficeScan Client Version	info
21676	Rendezvous Daemon Detection	info
21245	GDB Server Detection	high
21242	Novell Messenger Messaging Agent Detection	info
21241	Novell Messenger Archive Agent Detection	info
21218	SynchronEyes Teacher Detection	info
21217	SynchronEyes Student Detection	info

Detections

Analytics

Service detection Family for Nessus

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

high

info

info

info

info