{
  "port": 2602,
  "protocol": "tcp",
  "service": "ripd VTY (FRR / Quagga)",
  "oneLiner": "The RIP daemon's telnet config shell, one number up from zebra's.",
  "whatItIs": "FRR assigns each routing daemon a VTY port counting up from 2601: zebra 2601, ripd 2602, ripngd 2603, ospfd 2604, bgpd 2605, and so on. So 2602 open means ripd — the RIP/RIPv2 implementation — is running with its TCP VTY enabled, and finding it usually means its siblings are listening too. As with zebra, the supported way in is `vtysh` over local sockets, and the TCP VTY can be bound to localhost or disabled by passing port 0. IANA's registration for 2602 is discp-server, which has nothing to do with routing.",
  "exposure": {
    "verdict": "never",
    "note": "Cleartext telnet into a routing daemon's configuration shell; anyone who reaches it and knows the VTY password can alter what the router advertises."
  },
  "checkCommand": "nc -v 127.0.0.1 2602",
  "links": [
    {
      "title": "FRRouting — Basic Setup (zebra 2601/tcp, ripd 2602/tcp, vtysh)",
      "url": "https://docs.frrouting.org/en/latest/setup.html",
      "kind": "official-docs"
    },
    {
      "title": "FRRouting/frr",
      "url": "https://github.com/FRRouting/frr",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 2602 (discp-server)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=2602",
      "kind": "iana"
    }
  ],
  "ianaName": "discp-server"
}