{
  "port": 9102,
  "protocol": "tcp",
  "service": "Bacula File Daemon / JetDirect port 3",
  "oneLiner": "The Bacula/Bareos client agent on a backed-up machine — or a printer's third raw-print port.",
  "whatItIs": "The Bacula File Daemon runs on every machine that gets backed up; the Director contacts it on 9102 to enumerate and read files, and the daemon then streams data to the Storage Daemon. Bareos uses the same port for its file daemon. HP multi-port print servers also expose a third AppSocket channel here, which is why scanners report both names.",
  "exposure": {
    "verdict": "never",
    "note": "The file daemon reads arbitrary paths on the host on behalf of whoever authenticates to it — this is a whole-filesystem read primitive and must stay on an internal backup network."
  },
  "checkCommand": "nc -vz -w 3 TARGET 9102",
  "links": [
    {
      "title": "IANA port registry — 9102 (bacula-fd)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=9102",
      "kind": "iana"
    },
    {
      "title": "Bacula documentation",
      "url": "https://www.bacula.org/documentation/",
      "kind": "official-docs"
    },
    {
      "title": "bareos/bareos",
      "url": "https://github.com/bareos/bareos",
      "kind": "github"
    }
  ]
}