Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: TCP/5201 "targus-getdata" protocol? SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
TCP/5201 "targus-getdata" protocol?
Hello,

Does anyone have any information on the "targus-getdata" protocol that uses TCP/5201?

The port is registered to targusinfo.com which is also associated with neustar.biz:
http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=5201

Is anyone else seeing or blocking unwanted traffic on this port?

Thanks.
da1212

69 Posts
This port was reserved for a proprietary protocol develop by "TargusInfo", a company that has since been acquired by Neustar. I doubt the protocol is still used and any traffic you see on the port is likely due to other protocols that happen to use the port.

we have seen no traffic on this port from our DShield sensors recently:
isc.sans.edu/…
Johannes

3945 Posts
ISC Handler
tcp 5201 is also the default port used by iperf3, a bandwidth measurement tool (http://code.google.com/p/iperf/).

Chris
Anonymous

-

Sign Up for Free or Log In to start participating in the conversation!