{
  "port": 1169,
  "protocol": "tcp",
  "service": "Tripwire",
  "oneLiner": "IANA-registered to Tripwire, the file-integrity monitoring vendor.",
  "whatItIs": "IANA assigns 1169 to tripwire on TCP and UDP, registered by Tripwire. The original Open Source Tripwire is a local file-integrity checker that compares the filesystem against a signed baseline and opens no network listener at all, so the registration relates to the company's commercial agent/console products rather than the open-source tool. Nmap's frequency data shows it is rarely found open.",
  "exposure": {
    "verdict": "careful",
    "note": "A security-agent control channel is a high-value target — keep it on the management network and confirm which product actually owns the listener."
  },
  "checkCommand": "sudo lsof -nP -iTCP:1169 -sTCP:LISTEN",
  "links": [
    {
      "title": "Open Source Tripwire (file integrity checker)",
      "url": "https://github.com/Tripwire/tripwire-open-source",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}