{
  "port": 2190,
  "protocol": "both",
  "service": "TiVoConnect Beacon",
  "oneLiner": "TiVo boxes announcing themselves to each other on the local network.",
  "whatItIs": "IANA registers 2190 as tivoconnect, \"TiVoConnect Beacon\"; TiVo's own documentation calls it the TiVoConnect Discovery Protocol. A DVR broadcasts a short plaintext beacon over UDP 2190 carrying its machine identity, platform, software version, and the services it offers, and peers can also exchange the same records over TCP 2190. It exists so two TiVo units on one LAN find each other without configuration. Wireshark ships a dissector for it, which is the most accessible description of the on-the-wire format.",
  "exposure": {
    "verdict": "careful",
    "note": "Unauthenticated device-identity broadcasts designed for a home LAN — harmless there, but it leaks model and software version to anyone on the same segment and has no reason to cross a router."
  },
  "checkCommand": "sudo tcpdump -ni any udp port 2190",
  "links": [
    {
      "title": "Wireshark — packet-tivoconnect.c (TiVoConnect Discovery Protocol dissector)",
      "url": "https://github.com/wireshark/wireshark/blob/master/epan/dissectors/packet-tivoconnect.c",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 2190 (tivoconnect)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=2190",
      "kind": "iana"
    }
  ],
  "ianaName": "tivoconnect"
}