{
  "port": 9103,
  "protocol": "tcp",
  "service": "Bacula Storage Daemon",
  "oneLiner": "Where Bacula/Bareos backup data actually lands: the storage daemon.",
  "whatItIs": "The Storage Daemon owns the tapes, disk volumes, and autochangers, and both the Director and the file daemons connect to it on 9103 to write and read backup volumes. It is the third of Bacula's three daemons, completing the 9101/9102/9103 set, and Bareos inherits the same layout. Some HP print servers also use 9103 as a further raw-print channel.",
  "exposure": {
    "verdict": "never",
    "note": "Reaching the storage daemon means reaching the backup data itself; keep it inside the backup network and rely on Bacula's TLS options for any link that leaves a trusted segment."
  },
  "checkCommand": "nc -vz -w 3 TARGET 9103",
  "links": [
    {
      "title": "IANA port registry — 9103 (bacula-sd)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=9103",
      "kind": "iana"
    },
    {
      "title": "Bacula documentation",
      "url": "https://www.bacula.org/documentation/",
      "kind": "official-docs"
    },
    {
      "title": "bareos/bareos",
      "url": "https://github.com/bareos/bareos",
      "kind": "github"
    }
  ]
}