{
  "port": 1234,
  "protocol": "both",
  "service": "QEMU gdbstub / VLC streaming (unofficial); Infoseek search-agent (registered)",
  "oneLiner": "The classic \"pick a memorable port\" number — QEMU's debug stub and VLC's stream examples both land here.",
  "whatItIs": "The IANA registration is search-agent, \"Infoseek Search Agent\", which has no practical presence today. What actually uses 1234 is convention: QEMU's `-s` flag makes the guest's gdbstub listen on TCP 1234 so GDB can attach, and VLC's UDP/RTP streaming examples use 1234 as the destination port. Because it is short and easy to remember, ad-hoc test servers and tutorials pick it constantly, so an open 1234 usually means someone's debugger, stream, or throwaway listener rather than a defined service.",
  "exposure": {
    "verdict": "never",
    "note": "A QEMU gdbstub is unauthenticated full control of the guest, including memory writes — bind it to localhost. Ad-hoc listeners on 1234 are, by nature, not hardened."
  },
  "checkCommand": "sudo lsof -nP -iTCP:1234 -sTCP:LISTEN",
  "links": [
    {
      "title": "QEMU — GDB usage (`-s` listens for gdb on TCP port 1234)",
      "url": "https://www.qemu.org/docs/master/system/gdb.html",
      "kind": "official-docs"
    },
    {
      "title": "VLC User Documentation — Stream over UDP",
      "url": "https://docs.videolan.me/vlc-user/desktop/3.0/en/advanced/streaming/stream_over_udp.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}