# WHATPORT(2111)

## NAME

port 2111 — kx (X over Kerberos) / OPNET DSATP — IANA registers OPNET's Dynamic Sampling Agent protocol; Unix /etc/services calls it kx, X over Kerberos.

Protocol: TCP  
IANA registry

## DESCRIPTION

The IANA entry for 2111 is dsatp, the OPNET Dynamic Sampling Agent Transaction Protocol, assigned to OPNET Technologies. Unix service tables and Nmap instead name it kx, "X over Kerberos" — the Kerberized X11 forwarding daemon that shipped with the Kerberos application suite before SSH forwarding replaced it. Neither is common: Nmap finds 2111 open on about 0.03% of hosts. If it is answering, treat it as legacy monitoring or legacy Kerberos plumbing and confirm which by looking at the process.

## EXPOSURE

**Do not expose.** Both candidates are unmaintained: a monitoring agent transaction port or a Kerberized X-forwarding daemon that hands out display access. Keep it off public interfaces.

## CHECK

```sh
sudo lsof -nP -iTCP:2111 -sTCP:LISTEN
```

## SEE ALSO

- iana — [IANA Service Name and Transport Protocol Port Number Registry](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml) (iana.org)
- source — [nmap-services — Nmap port frequency data](https://github.com/nmap/nmap/blob/master/nmap-services) (github.com)

---

HTML: <https://whatport.net/2111/> · JSON: <https://whatport.net/2111.json> · full dataset: <https://whatport.net/ports.json>