{
  "port": 6502,
  "protocol": "tcp",
  "service": "BoKS Servm",
  "oneLiner": "BoKS's servm daemon, two above the 6500 base port.",
  "whatItIs": "IANA registers 6502 as boks-servm (with the older boks_servm name kept as an alias), part of the same Fox Technologies/Fortra BoKS block that starts at 6500. It carries the servm daemon's traffic within a BoKS domain, so it appears only alongside 6500 and its siblings on managed Unix hosts. As with the rest of the block the base port is configurable, so a BoKS deployment can sit somewhere else entirely and something unrelated can occupy 6502 instead — check the process, not just the number.",
  "exposure": {
    "verdict": "never",
    "note": "Part of an authentication and privileged-access control plane; expose it only between BoKS masters, replicas, and agents on a management network."
  },
  "checkCommand": "sudo lsof -nP -iTCP:6502 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 6502 (boks-servm)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=6502",
      "kind": "iana"
    }
  ]
}