{
  "port": 1067,
  "protocol": "both",
  "service": "Installation Bootstrap Protocol Server (instl_boots)",
  "oneLiner": "A BOOTP server on a private port pair — HP's Ignite-UX uses it to net-boot HP-UX installs without colliding with DHCP.",
  "whatItIs": "IANA registers 1067 as `instl-boots` (formerly `instl_boots`), the Installation Bootstrap Protocol server port. Its best-documented user is HP's Ignite-UX, whose `instl_bootd` daemon speaks BOOTP on 1067/1068 instead of the standard 67/68 precisely so that installing an HP-UX client does not draw answers from the site's regular DHCP servers — only instl_bootd listens on those ports, so only instl_bootd replies. Ignite-UX server setup asks that 1067, 1068, tftp/69 and bootps/67-68 all be free and reachable. Real traffic here is UDP; the TCP registration exists but is not what you see on the wire.",
  "exposure": {
    "verdict": "never",
    "note": "An unauthenticated bootstrap service that hands a machine its operating system image — provisioning VLAN only, never routed to anything untrusted."
  },
  "checkCommand": "sudo tcpdump -ni any udp port 1067 or udp port 1068",
  "links": [
    {
      "title": "HP Ignite-UX Administration Guide (HP-UX 10.x, 11.0, 11i)",
      "url": "https://www.bitsavers.org/pdf/hp/9000_hpux/1991-200x/200303_B2355-90772_Ignite-UX_Administration_Guide_HP_Computers_with_HP-UX_10.x_11.0_or_11i_Ed10.pdf",
      "kind": "official-docs"
    },
    {
      "title": "RFC 951 — Bootstrap Protocol (BOOTP)",
      "url": "https://www.rfc-editor.org/rfc/rfc951.html",
      "kind": "spec"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}