8471
Summary
- // if you see it open
- PORT is an experimental PIM mechanism. RFC 6559 recommends capability be disabled by default; confirm configured PIM neighbors and peer authorization when investigating this port. The evidence does not establish observed exposure or safety.
- // common applications
- PIM Sparse-ModeBidirectional PIM Neighbor-negotiated PIM control traffic; connection establishment and use depend on PORT capability at both neighbors.
About port 8471.
TCP port 8471 is registered as pim-port for PIM over Reliable Transport (PORT). RFC 6559 describes PORT as an experimental mechanism that carries PIM Join/Prune messages between PIM neighbors over a reliable transport. The assignment does not establish that any particular host runs it or that it should accept connections from the public internet.
PORT sends incremental Join/Prune updates instead of periodic updates. RFC 6559 specifies TCP and SCTP transports and assigns destination port 8471 to both; this profile covers the TCP assignment only. The mechanism applies to PIM Sparse-Mode and Bidirectional PIM Join/Prune messages, with capability negotiated between neighbors.
The RFC recommends that PORT capability be disabled by default and describes connection-security considerations, but the supplied evidence does not establish deployment frequency, current implementations, observed exposure, or malware associations. Treat an observation on this port as a clue to investigate PIM neighbor configuration, not as proof of service identity or safety.
- Intended use
- PIM PORT Join/Prune exchange between PIM neighbors; RFC 6559 is Experimental.
- Exposure
- Unknown from the supplied evidence; the protocol description does not establish a public internet audience.
- Security
- Verify the peer and intended PIM configuration; RFC 6559 recommends PORT capability be disabled by default.
- IANA service
pim-port, described as PIM over Reliable Transport [Confirmed] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
Protocol
PORT carries incremental PIM Join/Prune messages between PIM neighbors over TCP or SCTP
- Specification status
- RFC 6559 is Experimental [Confirmed] — https://www.rfc-editor.org/rfc/rfc6559.txt
- Deployment prevalence
- Unknown; assignment and specification do not establish observed use [Unknown] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
- Public exposure policy
- Unknown; supplied protocol evidence does not establish intended public-internet access [Unknown] — https://www.rfc-editor.org/rfc/rfc6559.txt
Service assignments.
| Name | Protocol | Description | Open frequency |
|---|---|---|---|
| pim-port | UDP | PIM over Reliable Transport | 0.03% |
| pim-port | TCP | PIM over Reliable Transport | 0.01% |
| pim-port | SCTP | PIM over Reliable Transport | 0.00% |
Service assignments from the IANA Service Name and Transport Protocol Port Number Registry, with open-frequency data from nmap-services.