{
  "port": 1068,
  "protocol": "both",
  "service": "Installation Bootstrap Protocol Client (instl_bootc)",
  "oneLiner": "The client half of the private BOOTP pair — where the machine being installed receives its boot reply.",
  "whatItIs": "IANA registers 1068 as `instl-bootc` (formerly `instl_bootc`), the client-side counterpart to 1067. In HP's Ignite-UX the booting client sends from and receives on 1068 while the server's `instl_bootd` answers from 1067, mirroring the standard BOOTP 67/68 relationship on a private port pair so installation traffic stays isolated from the site's DHCP. As with 1067, live traffic is UDP; the TCP registration is bookkeeping. On a host scan, seeing 1068 bound is normally a machine mid-provision or an Ignite-UX client daemon left running.",
  "exposure": {
    "verdict": "never",
    "note": "Part of an unauthenticated OS-provisioning exchange — keep the whole 1067/1068 pair inside the provisioning network."
  },
  "checkCommand": "sudo tcpdump -ni any udp port 1068",
  "links": [
    {
      "title": "HP Ignite-UX Administration Guide (HP-UX 10.x, 11.0, 11i)",
      "url": "https://www.bitsavers.org/pdf/hp/9000_hpux/1991-200x/200303_B2355-90772_Ignite-UX_Administration_Guide_HP_Computers_with_HP-UX_10.x_11.0_or_11i_Ed10.pdf",
      "kind": "official-docs"
    },
    {
      "title": "RFC 951 — Bootstrap Protocol (BOOTP)",
      "url": "https://www.rfc-editor.org/rfc/rfc951.html",
      "kind": "spec"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}