{
  "port": 2042,
  "protocol": "both",
  "service": "isis (registration only)",
  "oneLiner": "Registered as \"isis\" — and it is not the IS-IS routing protocol.",
  "whatItIs": "IANA registers the name isis on TCP and UDP 2042, with isis-bcast next door on 2043; the entry carries no description or reference document. The obvious guess is wrong: the IS-IS routing protocol (ISO 10589, extended for IP by RFC 1195) runs directly over the data link layer and has no TCP or UDP port at all, so nothing you see on 2042 is IS-IS. Nmap finds the port open on about 0.02% of scanned hosts, and no common software claims it.",
  "exposure": {
    "verdict": "careful",
    "note": "The name misleads. Identify the actual listener rather than assuming a routing daemon, and expose it only once you know what it is."
  },
  "checkCommand": "sudo lsof -nP -iTCP:2042 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "RFC 1195 — Use of OSI IS-IS for Routing in TCP/IP and Dual Environments",
      "url": "https://www.rfc-editor.org/rfc/rfc1195.html",
      "kind": "spec"
    }
  ]
}