{
  "port": 1201,
  "protocol": "both",
  "service": "Nucleus Sand Database Server",
  "oneLiner": "IANA-registered to the Nucleus Sand database server; a historical assignment you will rarely encounter.",
  "whatItIs": "Port 1201 is registered on TCP and UDP as nucleus-sand, \"Nucleus Sand Database Server\", assigned to James Marsh. The Sand analytic database (later Sand Technology's Nucleus/SAND CDBMS) is a niche column-store product with no current public protocol documentation at this port. There is nothing else well documented that habitually squats here, so an open 1201 on a modern host is almost certainly an unrelated program that grabbed a free registered port.",
  "exposure": {
    "verdict": "careful",
    "note": "If this really is a database listener it belongs on a private network; if it is not, identify the process before leaving it reachable."
  },
  "checkCommand": "sudo lsof -nP -iTCP:1201 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}