# WHATPORT(8649)

## NAME

port 8649 — Ganglia gmond — Ganglia's node monitoring daemon — UDP for the metric channel, TCP to dump cluster state as XML.

Protocol: TCP/UDP  
IANA registry

## DESCRIPTION

gmond, the Ganglia monitoring daemon, defaults to 8649 on both transports: a udp_recv_channel (usually multicast) collects metrics from other nodes, and a tcp_accept_channel serves the accumulated cluster state as XML to anything that connects. Both defaults are 8649 in the shipped configuration documentation. The port has no IANA assignment; it is a convention of the Ganglia project, common on HPC clusters and older Linux fleets. Connecting to it with netcat returns the full XML inventory with no authentication.

## EXPOSURE

**Do not expose.** An open TCP 8649 hands out hostnames, OS versions, load, and the shape of your whole cluster to anyone who connects. Ganglia's only control is an optional ACL — keep it on the management network.

## CHECK

```sh
nc TARGET 8649 | head -40
```

## SEE ALSO

- source — [Ganglia gmond configuration reference (conf.pod)](https://github.com/ganglia/monitor-core/blob/master/gmond/conf.pod) (github.com)
- source — [Ganglia monitor-core source repository](https://github.com/ganglia/monitor-core) (github.com)
- iana — [IANA Service Name and Transport Protocol Port Number Registry](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml) (iana.org)

---

HTML: <https://whatport.net/8649/> · JSON: <https://whatport.net/8649.json> · full dataset: <https://whatport.net/ports.json>