{
  "port": 497,
  "protocol": "both",
  "service": "Retrospect backup",
  "oneLiner": "A Retrospect backup client waiting for its backup server to call — still shipping software, common on Macs.",
  "whatItIs": "Retrospect is a long-running backup product for macOS, Windows and Linux, and 497 is its IANA-assigned port on both TCP and UDP. The client agent on each protected machine listens here, and the backup server uses the same port — including subnet broadcast and multicast — to discover and reach clients, which is why Retrospect's own firewall guidance says to open 497 TCP and UDP on both ends. On a Mac network it is one of the more common unexpected open ports, because installing the client opens it automatically.",
  "exposure": {
    "verdict": "never",
    "note": "A backup agent reads every file on the machine — anything that can authenticate to it can pull the whole filesystem, so keep it strictly on the backup network."
  },
  "checkCommand": "nc -vz -w 3 TARGET 497",
  "links": [
    {
      "title": "Retrospect — Opening your network firewall for Retrospect",
      "url": "https://docs.retrospect.com/docs/opening-your-network-firewall-for-retrospect",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 497",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=497",
      "kind": "iana"
    }
  ],
  "ianaName": "retrospect"
}