IBM Domino (formerly IBM Lotus Domino), an enterprise application for collaborative messaging, scheduling, directory services, and web services, is running on the remote host.

The remote service is an HP OVCM/Radia Notify Daemon, a component of an endpoint management solution. The presence of this service typically indicates the host is a managed device.

The remote host is running CLNTRUST (client trust), a component used by Novell's BorderManager for authentication to its proxy service.

The remote service is encrypted using Datagram Transport Layer Security (DTLS), which provides communications privacy for datagram protocols.

The remote service is an hpssd daemon, a component of the HP Linux Imaging and Printing (HPLIP) System that provides various services to HPLIP client applications.

The remote service is an X Window Font Service (xfs) daemon, which serves font files to clients.

The remote service is a BrightStor HSM Engine, the engine component of BrightStor Hierarchical Storage Manager, which is used to manage files on the remote host as part of an enterprise-grade tiered storage solution.

memcached, a memory-based object store, is listening on the remote port.

The remote host is running an OEJP (OpenEJB Enterprise Javabean Protocol) daemon, a fast and lightweight EJB server.

The remote service is a Client Acceptor Daemon used by IBM Tivoli Storage Manager Client for scheduling backups.

The remote service appears to be a Tor server.  Tor is a proxy service designed to protect the anonymity of its users.  It can also be used to support hidden services.

The remote service is a PostgreSQL database server, or a derivative such as EnterpriseDB.

The remote service is the UDP port for Timbuktu, a remote control software application for Windows and Mac OS X.

The remote service is a Cache' server, sometimes refered to as a Cache' SuperServer.  Cache' is an object database often used in association with web applications, and the SuperServer listens for incoming connections and dispatches them to the appropriate subsystem.

Nessus was able to identify the remote service by its banner or by looking at the error message it sends when it receives an HTTP request.

The remote service is running the Deployment Server component of Altiris Deployment Solution, a product for centralized management of computer systems throughout an enterprise.

UltraVNC seems to be running on the remote port. 

Upon connection, the remote service on this port sends pseudo-random bytes. 

It is probably UltraVNC with the new DSM encryption plugin.  This plugin tunnels the RFB protocol into a RC4 or AES encrypted stream.

The remote service is an instance of NetVault Process Manager, part of Dell NetVault, a cross-platform backup and restore application.

Dell NetVault was formerly known as BakBone NetVault Backup.

The remote service is a Communications Agent, which manages communications between Panda AdminSecure and client computers for centralized management of Panda antivirus software.

The remote service is an Ipswitch IM Server, the server portion of Ipswitch Instant Messaging, a secure, instant messaging product targeted at businesses and running on Windows.

The remote service is an Ipswitch IM Client, the client portion of Ipswitch Instant Messaging, a secure, instant messaging product targeted at businesses and running on Windows.

The remote host is running IBM Spectrum Protect, formerly known as Tivoli Storage Manager, a backup and data protection server.

The remote service is an Ingres Data Access Server, which translates requests from the JDBC driver and .NET Data Provider into an internal format and forwards them to the appropriate DBMS server.

The remote service is an Ingres Communications Server, also known as a Net Server.  This is the main process component of Ingres Net and monitors communications between applications and DBMS servers.

The remote host is running the 'status' server of Symantec Ghost solution, an OS deployment and management solution. 

This service is used by clients to ask if a management task has to be executed.

The remote host is running the 'locate' service of Symantec Ghost solution, an OS deployment and management solution. 

This service is used by clients to discover management servers or to test if the main server is alive.

An instant messaging server supporting the Extensible Messaging and Presence Protocol (XMPP), a protocol used for real-time messaging, is listening on the remote host.

The remote service appears to be a broadcast listener for avast! Management Server (AMS), which is used by avast! Distributed Network Manager (ADNM) as well as avast! Managed Clients for remote deployment and management of avast! antivirus within an enterprise.

The remote host is running MicroWorld eScan Agent, an embedded service used by the MicroWorld antivirus software.

The remote service appears to be an IP Transfer Agent used by Centennial Discovery, or one of its OEM versions.  Discovery is an enterprise tool for network auditing and monitoring, and the IP Transfer Agent (XFERWAN) offers a way for client agents and the application's Control Center to communicate.

The remote host is running Samba, a CIFS/SMB server for Linux and Unix.

By logging into the remote host with the supplied credentials, Nessus was able to obtain the name of the process listening on the remote port.

Note that the method used by this plugin only works for hosts running Linux or AIX.

An Administration Agent for McAfee E-Business Server is listening on the remote host.  McAfee E-Business Server is an enterprise tool for digitally encrypting and signing electronic files, and the Administration Agent allows for remote administration of the E-Business Server on the remote host.

Nessus had detected that the service running on the remote host will answer an HP Printer Job Language (PJL) request, which indicates that it is a printer device running HP JetDirect. By using the PJL protocol, users can submit printing jobs, transfer files to or from the printer, and change configuration settings.

There is a FrontBase FBExec process listening on the remote host. This service brokers connections from network clients to FrontBase database processes running on the remote host.

The remote host is running SQL Anywhere or Adaptive Server Anywhere, a database server from Sybase. 

It is possible to extract its version number from the server's greeting.

The remote host is running Trend Micro ServerProtect for Windows / NetWare, an antivirus / antispyware for Windows and NetWare servers.

An HP LoadRunner Agent is listening on the remote host. This agent enables a LoadRunner Controller to communicate with the LoadRunner Load Generator on the remote host for performance testing. Note that Hewlett-Packard acquired LoadRunner in November 2006 as part of its acquisition of Mercury Interactive.

BrightStor ARCserve Backup for Laptops & Desktops Server (formerly BrightStor Mobile Backup Server), an enterprise class backup solution for remote and mobile Windows-based PCs, is installed on the remote host.  And the service listening on this port is used by the application's Server Explorer to administer ARCserve Backup for Laptops & Desktops Server remotely.

BrightStor ARCserve Backup for Laptops & Desktops Server / BrightStor Mobile Backup Server, an enterprise class backup solution for remote and mobile Windows-based PCs, is installed on the remote host.  And the service listening on this port is used by clients to backup and restore files.

The remote host is running a TCP-based .NET Remoting Channel Service, also known as a 'TCP channel'.  .NET Remoting is an API developed by Microsoft and used for interprocess communications, and a channel service provides the mechanism by which such communications occur.  Two channel services are supplied as part of Microsoft's .NET Framework - a TCP channel, which uses binary payloads, and an HTTP channel, which uses SOAP by default.

The remote host is running a Teredo server. Teredo is a protocol for tunneling IPv6 over UDP, and is used to give nodes the ability to obtain IPv6 connectivity behind IPv4 network address translation (NAT) devices. A Teredo server is a node that is connected to both IPv4 and IPv6 networks.

The remote server appears to be running BrightStor ARCserve Backup, an enterprise class backup program. 

The software's Discovery Service listens for broadcast packets from other BrightStor servers on the local network to learn about their existence.

The remote host is running a collection client service from Novell ZenWorks Asset Management Server, a software and network management solution.

The remote server understands Service Location Protocol (SLP), a protocol that allows network applications to discover the existence, location, and configuration of various services in an enterprise network environment.  A server that understands SLP can either be a service agent (SA), which knows the location of various services, or a directory agent (DA), which acts as a central repository for service location information.

The remote host is running HP OpenView Storage Mirroring Daemon.
This service is part of the HP OpenView Management suite.

The remote server is an H.323 proxy that understands the Skinny protocol, also known as SCCP, for 'Skinny Client Control Protocol'. Skinny is Cisco's proprietary lightweight terminal control protocol used by some VoIP phones to communicate with Cisco CallManager or Asterisk PBX systems.

The remote host is running Pervasive PSQL / Btrieve, a commercial database engine.

ID	Name	Severity
27855	IBM Domino Detection (uncredentialed check)	info
27627	HP OVCM/Radia Notify Daemon Detection	info
27600	Novell CLNTRUST Service Detection	info
27057	Datagram Transport Layer Security Detection	info
27056	HP Linux Imaging and Printing System HPSSD Daemon Detection	info
26971	X Font Service Detection	info
26913	CA BrightStor HSM Engine Detection (UDP)	info
26912	CA BrightStor HSM Engine Detection (TCP)	info
26197	memcached Detection	info
26195	OEJP Daemon Detection	info
26186	IBM Tivoli Storage Manager Client Acceptor Daemon Detection	info
26026	Tor Server Detection	info
26024	PostgreSQL Server Detection	info
25953	Timbuktu Detection (UDP)	info
25934	Cache' SuperServer Detection	info
22964	Service Detection	info
25897	Altiris Deployment Server Detection	info
25821	UltraVNC w/ DSM Plugin Detection (2)	info
25800	NetVault Process Manager Service Detection	info
25763	Panda AdminSecure Communications Agent Detection	info
25761	Ipswitch Instant Messaging Server Detection	info
25760	Ipswitch Instant Messaging Client Detection	info
25656	IBM Spectrum Protect / Tivoli Storage Manager Service Detection	info
25636	Ingres Data Access Server Detection	info
25572	Ingres Communications Server Detection	info
25491	Symantec Ghost Solution Status Server Detection	info
25490	Symantec Ghost Solution Locate Server Detection	info
25342	XMPP Server Detection	info
25336	avast! Management Server Detection	info
25295	eScan Agent Detection	info
25292	Centennial IP Transfer Agent Detection	info
25240	Samba Server Detection	info
25221	Remote listeners enumeration (Linux / AIX)	info
25089	McAfee E-Business Administration Agent Detection	info
25037	Printer Job Language (PJL) Detection	info
24898	FrontBase FBExec Process Detection	info
24781	Sybase SQL Anywhere Server Detection	info
24679	Trend Micro ServerProtect Detection	info
24326	HP LoadRunner Agent Service Detection	info
24239	ARCserve Backup for Laptops & Desktops Server Admin Service Detection	info
24238	ARCserve Backup for Laptops & Desktops Server Detection	info
24018	TCP Channel Detection	info
23972	Teredo Server Detection	info
23832	CA BrightStor ARCserve Backup Discovery Service Detection	info
23786	Novell ZenWorks Asset Management Server Detection	info
23778	SLP Server Detection (UDP)	info
23777	SLP Server Detection (TCP)	info
23698	HP OpenView Storage Mirroring Server Detection	info
22877	Skinny Server Detection	info
22528	Pervasive PSQL / Btrieve Server Detection	info

Detections

Analytics

Service detection Family for Nessus

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info