{
  "port": 1097,
  "protocol": "tcp",
  "service": "Sun Cluster Manager",
  "oneLiner": "IANA-registered to Sun Cluster Manager; almost never seen on a modern scan.",
  "whatItIs": "IANA lists 1097 as sunclustermgr, registered for Sun Cluster Manager, the management interface that shipped with Sun's clustering products for Solaris. Nmap's service-frequency data puts it near the bottom of the range, so an open 1097 today is far more likely to be an unrelated application that picked a free port above 1024. If you find it listening, identify the process locally rather than assuming the registration is accurate.",
  "exposure": {
    "verdict": "never",
    "note": "The registration is a cluster administration plane; whatever is actually listening, an unidentified service on a management-range port does not belong on a public IP."
  },
  "checkCommand": "sudo lsof -nP -iTCP:1097 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "nmap-services (port name and frequency data)",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}