{
  "port": 1104,
  "protocol": "tcp",
  "service": "XRL",
  "oneLiner": "Registered to XRL; effectively unused in the wild, so an open 1104 is something else entirely.",
  "whatItIs": "IANA assigns 1104 to a service named xrl for both TCP and UDP, with no public protocol specification behind the registration. Nmap's frequency data records it as open on a vanishingly small fraction of scanned hosts. Treat an open 1104 as an unidentified local application that grabbed a low free port, not as evidence of XRL.",
  "exposure": {
    "verdict": "careful",
    "note": "Nothing standard listens here, so the first job is identifying the process; do not expose a service you cannot name."
  },
  "checkCommand": "sudo lsof -nP -iTCP:1104 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "nmap-services (port name and frequency data)",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}