{
  "port": 6101,
  "protocol": "tcp",
  "service": "Backup Exec Agent Browser (IANA: SynchroNet-rtc)",
  "oneLiner": "Registered as SynchroNet-rtc, but on Windows networks it is the Backup Exec Agent Browser.",
  "whatItIs": "IANA has 6101 as synchronet-rtc, and that is the name /etc/services reports, but the service you actually meet on this port is the Backup Exec Agent Browser: remote agents advertise their resources to the media server over TCP 6101 so backup selections can be browsed. The port is not covered by any public protocol document, so the identification rests on the software's own behaviour rather than a specification. A listener marks a machine inside someone's backup infrastructure.",
  "exposure": {
    "verdict": "never",
    "note": "Backup infrastructure sees every file on every protected host — keep the agent ports on the backup VLAN, never on an internet-facing interface."
  },
  "checkCommand": "sudo lsof -nP -iTCP:6101 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 6101 (synchronet-rtc)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=6101",
      "kind": "iana"
    }
  ]
}