{
  "port": 7938,
  "protocol": "tcp",
  "service": "NetWorker portmapper (lgtomapper)",
  "oneLiner": "NetWorker's own portmapper, sitting next to nsrexecd on a backup client.",
  "whatItIs": "7938 carries what Nmap calls `lgtomapper`, the Legato/NetWorker portmapper that tells callers which dynamic port each NetWorker service is on — the same job Sun RPC's portmapper does on 111. It is unassigned at IANA and appears almost exclusively alongside 7937 on hosts running the NetWorker client. A scan showing 7937 and 7938 together is a reliable NetWorker fingerprint.",
  "exposure": {
    "verdict": "never",
    "note": "A portmapper enumerates the rest of the backup stack for whoever asks. Keep it inside the backup segment with the client daemon it serves."
  },
  "checkCommand": "nmap -sV -Pn -p 7937,7938 TARGET",
  "links": [
    {
      "title": "nmap/nmap — nmap-services (7938/tcp lgtomapper, Legato portmapper)",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 7938",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7938",
      "kind": "iana"
    }
  ]
}