# Known RPC numbers Nmap uses for RPC grinding -*- mode: fundamental; -*-# $Id: nmap-rpc 2667 2005-04-23 02:47:29Z fyodor $# This was created by Vik Bajaj <vbajaj@sas.upenn.edu> with help# from various members of the nmap-hackers list.  # To join nmap-hackers send mail to nmap-hackers-subscribe@insecure.org# Nmap is available from http://www.insecure.org/nmap/# All the rpc services we could find as of Feb26, 2005# Tweaked a bit by Fyodor <fyodor@insecure.org>## NOTE:  Eilon Gishri <eilon@aristo.tau.ac.il> has merged the nmap-rpc# with his massive rpc file (see comments below).# ftp://ftp.tau.ac.il/pub/users/eilon/rpc/rpc## Someday I would like to reorder this with the most popular services# first to make scans faster### ident "@(#)rpc        1.11    95/07/14 SMI"   /* SVr4.0 1.2   */## $Date: 2005-04-22 19:47:29 -0700 (Fri, 22 Apr 2005) $## $Revision: 2667 $## Master RPC program number data base (/etc/rpc).## Maintained by Eilon Gishri <eilon@aristo.tau.ac.il>## DISCLAIMER: This is provided as a public service. Neither I nor#             anyone else guarantees the correctness of these entries.## The latest version of this file is available at:##            ftp://ftp.tau.ac.il/pub/users/eilon/rpc/## Program numbers are assigned in groups of 0x20000000 (decimal 536870912)# according to the following chart: ##	       0x0 - 0x1fffffff		Defined by Sun #	0x20000000 - 0x3fffffff		Defined by user #	0x40000000 - 0x5fffffff		Transient #	0x60000000 - 0x7fffffff		Reserved #	0x80000000 - 0x9fffffff		Reserved #	0xa0000000 - 0xbfffffff		Reserved #	0xc0000000 - 0xdfffffff		Reserved #	0xe0000000 - 0xffffffff		Reserved ## To obtain SUN Remote Procedure Call (RPC) numbers send an e-mail# request to "rpc@sun.com".#rpcbind		100000	portmap sunrpc rpcbindrstatd		100001	rstat rup perfmeter rstat_svcrusersd		100002	rusersnfs		100003	nfsprog nfsdypserv		100004	ypprogmountd		100005	mount showmountremote_dbx	100006ypbind		100007walld		100008  rwall shutdownyppasswdd       100009  yppasswdetherstatd      100010  etherstatrquotad         100011  rquotaprog quota rquotasprayd          100012  spray3270_mapper     100013rje_mapper      100014		# Remote job entry mapping service.selection_svc   100015  selnsvcdatabase_svc    100016	dbsessionmgr unify netdbms dbmsrexd            100017	rex remote_execalis            100018	alice office_autosched           100019llockmgr        100020nlockmgr        100021x25.inr         100022statmon         100023status          100024	statd rpc.statd		# Status monitorselect_lib      100025bootparam       100026mazewars        100027		# Mazewars gameypupdated       100028  ypupdatekeyserv         100029  keyserversecurelogin     100030nfs_fwdlnit     100031		# NFS network forwarding service.nfs_fwdtrns     100032		# NFS forwarding transmittersunlink_mapper	100033net_monitor	100034database	100035		# Lightweight databasepasswd_auth	100036tfsd		100037		# Translucent file service.nsed		100038nsemntd		100039pfs_mountd	100040showfhd		100043	showfhmvsmount	100044		# MVSmount daemon (for mvslogin mvslogout)ioadmd		100055	rpc.ioadmdshowattrd	100059		# DFSMS/MVS NFS serverNETlicense	100062sunisamd	100065debug_svc 	100066	dbsrvcmsd		100068	rpc.cmsd dtcalendarypxfrd		100069	rpc.ypxfrd ypxfrbugtraqd	100071kerbd		100078rpc.operd	100080	opermsg		# Sun Online-Backupttdbserverd     100083	rpc.ttdbserverd ttdbserverd ttdbserver tooltalkadmind		100087autofsd		100099	autofsdevent		100101	na.event	# SunNet Managerlogger		100102	na.logger	# SunNet Managersync		100104	na.syncdiskinfo	100105	na.diskinfo	# SunNet Manageriostat		100106	na.iostathostperf	100107	na.hostperfactivity	100109	na.activity	# SunNet Managerdb_mgr		100110lpstat		100111	na.lpstat	# SunNet Managerhostmem		100112	na.hostmemsample		100113	na.samplex25		100114	na.x25ping		100115	na.pingrpcnfs		100116	na.rpcnfshostif		100117	na.hostifetherif		100118	na.etherifippath		100119	na.ippath	# SunNet Manageriproutes	100120	na.iprouteslayers		100121	na.layerssnmp		100122	na.snmp snmp-cmc snmp-synoptics snmp-unisys snmp-utktraffic		100123	na.trafficDNInode		100124	na.dni	DNIneTlayers2		100131	na.layers2	# SunNet Managernsm_addrand	100133			# Solaris's statd NSMktkt_warnd	100134			# Kerberos warning daemon	etherif2	100135	na.etherif2	# SunNet Managerhostmem2	100136	na.hostmem2	# SunNet Manageriostat2		100137	na.iostat2	# SunNet Managersnmpv2		100138	na.snmpv2	# SNM Version 2.2.2sender		100139	cc_sender	# Cooperative Consolesamiserv		100146			# AMI Daemonamiaux		100147			# AMI Daemonocfserv		100150			# OCF (Smart card) Daemonsunvts		100153smserverd	100155	rpc.smserverd	# support removable media devices kcms_server	100221			# SunKCMS Profile Servernfs_acl		100227## rpc.metad - SUNWmd - Sun Solstice DiskSuite#metad		100229	metad	rpc.metad # METAD - SLVM metadb Daemonmetamhd		100230	metamhd	rpc.metamhd#nfsauth		100231sadmind		100232			# Solsticeufsd		100233	ufsdgssd		100234	gss		# GSS Daemoncachefsd	100235	cachefs		# CacheFS Daemonrpc.metamedd	100242			# SUNWmdm - Sun Clustersm_symond	100244			# Solstice SyMON process controllerrpc.pmfd	100248	pmfd		# Sun Cluster - process monitor serversnmpXdmid	100249rpc.metacld	100281			# SUNWmdm - Sun Clusternisd		100300	rpc.nisdnis_cache	100301nis_callback	100302nispasswd	100303	rpc.nispasswddfnsypd          100304			# Federated Naming Service (FNS)# MDMN_COMMDmdcommd         100422			# SVM Multi Node Communication Daemon stfsloader	100424			# Standard Type Services Framework (STSF) Font Serverrpc.pts         105004  Protoserver	# Advanced Printing Softwareswu_svr		120100			# Software Usage Monitoring daemon nf_snmd		120126			# SunNet Managernf_snmd		120127pcnfsd		150001	pcnfs## Pyramid#PyramidLock	200000PyramidSys5	200001		# Sys5#CADDS_Image     200002 		# CV CADDS images.#pdbDA		200005SWG		200020	swg	# DMFE/DAWS (Defense Automated Warning System)exportmap	200023## DMFE/DAWS (Defense Automated Warning System)#Gqsrv		200034	gqsrvPpt		200035	pptPmt		200036	pmtMsgt		200037	msgtWalerts		200038	walertsMgt		200039	mgtPft		200040	pftMsgq		200041	msgqSmpsrv		200042	smpsrvDexsrv		200043	dexsrvStatussrv	200044	statussrvSessionServer	200046	sessionserverSessionDaemon	200047	sessiondaemonPmsgq		200048	pmsgqFilesrv		200049	filesrvMagfetch	200050	magfetchOptfetch	200051	optfetchSecuritysrv	200052	securitysrv#bundle		200100 # Delay Tolerant Networking - DTN agentbundle_demux	200200 # Delay Tolerant Networking - DTN agent## EcoTools daemons/programs#ecodisc		200201ecolic		200202eamon		200203ecoad		200205## VERSANT# Operator Communications Software (OCS)#rpc.dbserv      211637  dbserv rpc.dbserv_dirrpc.taped       217843	taped  rpc.taped_dirrpc.taped       217854  taped  rpc.taped_dir#ADTFileLock     300001		# ADT file locking service.## FrameMaker#rpc.frameusersd	300004				# FrameMakerfmclient	300006				# FrameMaker Clientfmeditor	300007				# FrameMaker Editorfmserver	300009	stdfm FrameServer	# FrameMaker Server#amd		300019	amq#Steering	300021		# Steering Library#rpc.ldmd	300029	ldm	# Unidata LDM## DMFE/DAWS (Defense Automated Warning System)#UpdtAuditsS	300030	Dbpass		300091	dbpass#clms		300145		# CenterLine CodeCenter## FrameMakerfm_flb		300214		# FrameMakerfm_fls		300215		# FrameMaker licnese server## AcuServer provides remote file access services to ACUCOBOL-85 and# ACUCOBOL-GT applications. #acuserve	300301#dr_daemon	300326		# Sun Enterprise Server Alternate Pathing## FA&O Command Post App#rmd		300375agcd		300376#bssd		300433	bssdrdd		300434	drdap_daemon       300473		# SUNWapu - Alternate Pathing (AP)cnxmond		300483		# cluster node monitor (Digital UNIX)cnxagentd	300484		# cluster agent (Digital UNIX)mcserv		300516cluinfod	300527		# cluster information server (Digital UNIX)dmispd		300598		# Sun Solstice Enterprise DMI Service Providerprpasswd	300632ks		300664		# ACPLT/KS protocolsfs		344444		# SFS - Self-Certifying File Systemmapsvc		351455berkeleydb	351457		# Sleepycat Software: Berkeley DBprestoctl_svc	390100	presto	# Prestoserve control daemon## Computer Associates#caasalert	351473caservd		395644	as6_arcservecalqserver	395645	as6_queue LQServercamediadsvr	395646	as6_tapesvr MediaSvrcaldbserver	395647	as6_dbserver LDbservercaauthd		395648	as6_authcadiscovd	395649	as6_discoverycaloggerd	395650	as6_logger## Legato NetWorker#rap		390101	raplarapserv		390102	raprdnsrd		390103	nsr	 # NetWorker servicensrmmd		390104	nsrmm	 # NetWorker media mupltiplexor daemonnsrindexd	390105	nsrindex # NetWorker file index daemonnsrmmdbd	390107	nsrmmdb  # NetWorker media management database daemonnsrstat		390109nsrjb		390110	nsrjbd	 # NetWorker jukebox-control servicensrexec		390113	nsrexecd # NetWorker client execution servicelgtolmd		390115		 # Legato license daemonnsrnotd		390400		 # NetWorker notary service## Remedy AR System daemons#arserverd       390600  arserverdntserverd       390601	ntserverd	# Remedy Notifier and AR Server 5.0ntclientd       390602  ntclientdaresclsrv       390603  aresclsrvarservtcd       390604  arservtcd# Remedy Flashboards daemonsflashservd	390610	flashservdarflashbd       390619  arflashbd#arfastsrv       390620  arfastsrvarfastsrv       390621  arfastsrvarfastsrv       390622  arfastsrvarfastsrv       390623  arfastsrvarfastsrv       390624  arfastsrvarfastsrv       390625  arfastsrvarfastsrv       390626  arfastsrvarfastsrv       390627  arfastsrvarfastsrv       390628  arfastsrvarfastsrv       390629  arfastsrvarfastsrv       390630  arfastsrvarfastsrv       390631  arfastsrvarfastsrv       390632  arfastsrvarfastsrv       390633  arfastsrv