{
  "port": 20031,
  "protocol": "tcp",
  "service": "Unassigned (NetVault on UDP)",
  "oneLiner": "Unassigned on TCP; Nmap names the UDP side as BakBone NetVault's backup communications port.",
  "whatItIs": "IANA has 20031 inside the unassigned range 20015-20033, so there is no TCP registration. Nmap's service table labels 20031/udp 'bakbonenetvault — BakBone NetVault primary communications port', with a comparatively high open-frequency, and NetVault (BakBone, later Quest) is the only widely documented user of this number. On TCP the entry is 'unknown'. If you find it open on a server that also runs backup agents, NetVault is the first thing to check; otherwise treat it as an unidentified listener.",
  "exposure": {
    "verdict": "never",
    "note": "A backup control channel reaches every file on every protected host. Whether or not it is NetVault, this stays on a management network."
  },
  "checkCommand": "nmap -Pn -sV -p 20031 --reason TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "Nmap nmap-services frequency table",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}