http	80/tcp	0.484143	# World Wide Web HTTP
telnet	23/tcp	0.221265
https	443/tcp	0.208669	# secure http (SSL)
ftp	21/tcp	0.197667	# File Transfer [Control]
ssh	22/tcp	0.182286	# Secure Shell Login
smtp	25/tcp	0.131314	# Simple Mail Transfer
ms-wbt-server	3389/tcp	0.083904	# Microsoft Remote Display Protocol (aka ms-term-serv, microsoft-rdp) | MS WBT Server
pop3	110/tcp	0.077142	# PostOffice V.3 | Post Office Protocol - Version 3
microsoft-ds	445/tcp	0.056944	# SMB directly over IP
netbios-ssn	139/tcp	0.050809	# NETBIOS Session Service
imap	143/tcp	0.050420	# Interim Mail Access Protocol v2 | Internet Message Access Protocol
domain	53/tcp	0.048463	# Domain Name Server
msrpc	135/tcp	0.047798	# epmap | Microsoft RPC services | DCE endpoint resolution
mysql	3306/tcp	0.045390
http-proxy	8080/tcp	0.042052	# http-alt | Common HTTP proxy/second web server port | HTTP Alternate (see port 80)
pptp	1723/tcp	0.032468	# Point-to-point tunnelling protocol
rpcbind	111/tcp	0.030034	# sunrpc | portmapper, rpcbind | SUN Remote Procedure Call
pop3s	995/tcp	0.029921	# POP3 protocol over TLS/SSL | pop3 protocol over TLS/SSL (was spop3) | POP3 over TLS protocol
imaps	993/tcp	0.027199	# imap4 protocol over TLS/SSL | IMAP over TLS protocol
vnc	5900/tcp	0.023560	# rfb | Virtual Network Computer display 0 | Remote Framebuffer
NFS-or-IIS	1025/tcp	0.022406	# blackjack | IIS, NFS, or listener RFS remote_file_sharing | network blackjack
submission	587/tcp	0.019721	# Message Submission
sun-answerbook	8888/tcp	0.016522	# ddi-udp-1 | ddi-tcp-1 | Sun Answerbook HTTP server.  Or gnump3d streaming music server | NewsEDGE server TCP (TCP 1) | NewsEDGE server UDP (UDP 1)
smux	199/tcp	0.015945	# SNMP Unix Multiplexer
h323q931	1720/tcp	0.014277	# h323hostcall | Interactive media | H.323 Call Control Signalling | H.323 Call Control
smtps	465/tcp	0.013888	# submissions | igmpv3lite | urd | smtp protocol over TLS/SSL (was ssmtp) | URL Rendesvous Directory for SSM | IGMP over UDP for SSM | URL Rendezvous Directory for SSM | Message Submission over TLS protocol
afp	548/tcp	0.012395	# afpovertcp | AFP over TCP
ident	113/tcp	0.012370	# auth | ident, tap, Authentication Service | Authentication Service
hosts2-ns	81/tcp	0.012056	# HOSTS2 Name Server
X11:1	6001/tcp	0.011730	# X Window server
snet-sensor-mgmt	10000/tcp	0.011692	# ndmp | SecureNet Pro Sensor https management server or apple airport admin | Network Data Management Protocol
shell	514/tcp	0.011078	# syslog | BSD rshd(8) | cmd like exec, but automatic authentication is performed as for login server
sip	5060/tcp	0.010613	# Session Initiation Protocol (SIP)
bgp	179/tcp	0.010538	# Border Gateway Protocol
LSA-or-nterm	1026/tcp	0.010237	# cap | nterm remote_login network_terminal | Calendar Access Protocol
cisco-sccp	2000/tcp	0.010112	# cisco SCCP (Skinny Client Control Protocol) | Cisco SCCP | Cisco SCCp
https-alt	8443/tcp	0.009986	# pcsync-https | Common alternative https port | PCsync HTTPS
http-alt	8000/tcp	0.009710	# irdmi | A common alternative http port | iRDMI
filenet-tms	32768/tcp	0.009199	# Filenet TMS
rtsp	554/tcp	0.008104	# Real Time Stream Control Protocol | Real Time Streaming Protocol (RTSP)
rsftp	26/tcp	0.007991
ms-sql-s	1433/tcp	0.007929	# Microsoft-SQL-Server
unknown	49152/tcp	0.007907
dc	2001/tcp	0.007339	# wizard | or nfr20 web queries | curry
printer	515/tcp	0.007214	# spooler (lpd) | spooler
http	8008/tcp	0.006843	# http-alt | IBM HTTP server | HTTP Alternate
unknown	49154/tcp	0.006767
IIS	1027/tcp	0.006724	# 6a44 | IPv6 Behind NAT44 CPEs
nrpe	5666/tcp	0.006614	# Nagios NRPE | Nagios Remote Plugin Executor
ldp	646/tcp	0.006549	# Label Distribution
upnp	5000/tcp	0.006423	# commplex-main | Universal PnP, also Free Internet Chess Server
pcanywheredata	5631/tcp	0.006248
ipp	631/tcp	0.006160	# ipps | Internet Printing Protocol -- for one implementation see http://www.cups.org (Common UNIX Printing System) | IPP (Internet Printing Protocol) | Internet Printing Protocol over HTTPS
unknown	49153/tcp	0.006158
blackice-icecap	8081/tcp	0.006147	# sunproxyadmin | ICECap user console | Sun Proxy Admin Service
nfs	2049/tcp	0.006110	# networked file system
kerberos-sec	88/tcp	0.006072	# kerberos | Kerberos (v5) | Kerberos
finger	79/tcp	0.006022
vnc-http	5800/tcp	0.005947	# Virtual Network Computer HTTP Access, display 0
pop3pw	106/tcp	0.005934	# 3com-tsmux | Eudora compatible PW changer | 3COM-TSMUX
ccproxy-ftp	2121/tcp	0.005834	# scientia-ssdb | CCProxy FTP Proxy | SCIENTIA-SSDB
nfsd-status	1110/tcp	0.005809	# nfsd-keepalive | webadmstart | Cluster status info | Start web admin server | Client status info
unknown	49155/tcp	0.005702
X11	6000/tcp	0.005683	# X Window server
login	513/tcp	0.005595	# who | BSD rlogind(8) | remote login a la telnet; automatic authentication performed based on priviledged port numbers and distributed data bases which identify "authentication domains" | maintains data bases showing who's logged in to machines on a local net and the load average of the machine
ftps	990/tcp	0.005570	# ftp protocol, control, over TLS/SSL
wsdapi	5357/tcp	0.005474	# Web Services for Devices
svrloc	427/tcp	0.005382	# Server Location
unknown	49156/tcp	0.005322
klogin	543/tcp	0.005282	# Kerberos (v4/v5)
kshell	544/tcp	0.005269	# krcmd Kerberos (v4/v5) | krcmd
admdog	5101/tcp	0.005156	# talarian-udp | talarian-tcp | (chili!soft asp) | Talarian_TCP | Talarian_UDP
news	144/tcp	0.004981	# uma | NewS window system | Universal Management Architecture
echo	7/tcp	0.004855
ldap	389/tcp	0.004717	# Lightweight Directory Access Protocol
ajp13	8009/tcp	0.004642	# nvme-disc | Apache JServ Protocol 1.3 | NVMe over Fabrics Discovery Service
squid-http	3128/tcp	0.004516	# ndl-aas | Active API Server Port
snpp	444/tcp	0.004466	# Simple Network Paging Protocol
abyss	9999/tcp	0.004441	# Abyss web server remote web management interface | distinct
airport-admin	5009/tcp	0.004416	# winfs | Apple AirPort WAP Administration | Microsoft Windows Filesystem
realserver	7070/tcp	0.004328	# arcp | ARCP
aol	5190/tcp	0.004190	# America-Online.  Also can be used by ICQ | America-Online
ppp	3000/tcp	0.004115	# remoteware-cl | hbci | User-level ppp daemon, or chili!soft asp | HBCI | RemoteWare Client
postgresql	5432/tcp	0.004090	# PostgreSQL database server | PostgreSQL Database
upnp	1900/tcp	0.003977	# ssdp | Universal PnP | SSDP
mapper-ws_ethd	3986/tcp	0.003977	# mapper-ws-ethd | MAPPER workstation server
daytime	13/tcp	0.003927
ms-lsa	1029/tcp	0.003801	# solid-mux | Solid Mux Server
discard	9/tcp	0.003764	# sink null
ida-agent	5051/tcp	0.003649	# ita-agent | Symantec Intruder Alert | ITA Agent
unknown	6646/tcp	0.003649
unknown	49157/tcp	0.003573
unknown	1028/tcp	0.003421
rsync	873/tcp	0.003400	# Rsync server ( http://rsync.samba.org )
wms	1755/tcp	0.003350	# Windows media service | ms-streaming
pn-requester	2717/tcp	0.003345	# PN REQUESTER
radmin	4899/tcp	0.003337	# radmin-port | Radmin (www.radmin.com) remote PC control software | RAdmin Port
jetdirect	9100/tcp	0.003287	# pdl-datastream | hp-pdl-datastr | HP JetDirect card | PDL Data Streaming Port | Printer PDL Data Stream
nntp	119/tcp	0.003262	# Network News Transfer Protocol
time	37/tcp	0.003161	# timserver
cadlock	1000/tcp	0.003149	# cadlock2
nessus	3001/tcp	0.003124	# origo-native | Nessus Security Scanner (www.nessus.org) Daemon or chili!soft asp | OrigoDB Server Native Interface
commplex-link	5001/tcp	0.003023
xfer	82/tcp	0.002923	# XFER Utility
rxapi	10010/tcp	0.002889	# ooRexx rxapi services
iad1	1030/tcp	0.002860	# BBN IAD
zeus-admin	9090/tcp	0.002747	# websm | Zeus admin server | WebSM
msmq-mgmt	2107/tcp	0.002737	# bintec-admin | Microsoft Message Queuing (IANA calls this bintec-admin) | BinTec Admin
kdm	1024/tcp	0.002722	# K Display Manager (KDE version of xdm)
zephyr-clt	2103/tcp	0.002661	# Zephyr serv-hm connection
X11:4	6004/tcp	0.002597	# X Window server
msmq	1801/tcp	0.002585	# Microsoft Message Queuing | Microsoft Message Que
mmcc	5050/tcp	0.002584	# multimedia conference control tool
chargen	19/tcp	0.002559	# ttytst source Character Generator
unknown	8031/tcp	0.002509
danf-ak2	1041/tcp	0.002433	# AK2 Product
unknown	255/tcp	0.002409
td-postman	1049/tcp	0.002357	# Tobit David Postman VPMN
neod2	1048/tcp	0.002357	# Sun's NEO Object Request Broker
symantec-av	2967/tcp	0.002357	# ssc-agent | Symantec AntiVirus (rtvscan.exe) | SSC-AGENT
remote-as	1053/tcp	0.002357	# Remote Assistant (RA)
adobeserver-3	3703/tcp	0.002357	# Adobe Server 3
vfo	1056/tcp	0.002357
syscomlan	1065/tcp	0.002357
jstel	1064/tcp	0.002357
brvread	1054/tcp	0.002357
qotd	17/tcp	0.002346	# Quote of the Day
ccproxy-http	808/tcp	0.002296	# CCProxy HTTP/Gopher/FTP (over HTTP) proxy
rendezvous	3689/tcp	0.002283	# daap | Rendezvous Zeroconf (used by Apple/iTunes) | Digital Audio Access Protocol (iTunes)
iad2	1031/tcp	0.002221	# BBN IAD
dcutility	1044/tcp	0.002205	# Dev Consortium Utility
bsquare-voip	1071/tcp	0.002205
vnc-1	5901/tcp	0.002145	# Virtual Network Computer display 1
newacct	100/tcp	0.002133	# [unauthorized use]
jetdirect	9102/tcp	0.002133	# bacula-fd | HP JetDirect card. Also used (and officially registered for) Bacula File Daemon (an open source backup system) | Bacula File Daemon
xmpp	8010/tcp	0.002129	# XMPP File Transfer
icslap	2869/tcp	0.002129	# Universal Plug and Play Device Host, SSDP Discovery Service
sbl	1039/tcp	0.002129	# Streamlined Blackhole
barracuda-bbs	5120/tcp	0.002129	# Barracuda Backup Protocol
newoak	4001/tcp	0.002129
cslistener	9000/tcp	0.002129
eklogin	2105/tcp	0.002120	# minipay | Kerberos (v4) encrypted rlogin | MiniPay
ldapssl	636/tcp	0.002083	# ldaps | LDAP over SSL | ldap protocol over TLS/SSL (was sldap)
mtqp	1038/tcp	0.002053	# Message Tracking Query Protocol
zebra	2601/tcp	0.002032	# discp-client | zebra vty | discp client
tcpmux	1/tcp	0.001995	# TCP Port Service Multiplexer
afs3-fileserver	7000/tcp	0.001995	# file server itself, msdos | file server itself
fpo-fns	1066/tcp	0.001901
cognex-insight	1069/tcp	0.001901
apple-xsrvr-admin	625/tcp	0.001869	# dec_dlm | dec-dlm | Apple Mac Xserver admin | DEC DLM
asip-webadmin	311/tcp	0.001857	# appleshare ip webadmin | AppleShare IP WebAdmin
http-mgmt	280/tcp	0.001844
unknown	254/tcp	0.001832
remoteanything	4000/tcp	0.001794	# terabase | neoworx remote-anything remote control | Terabase
snmp-tcp-port	1993/udp	0.001779	# cisco SNMP TCP port
landesk-rc	1761/tcp	0.001756	# LANDesk Remote Control | cft-0
filemaker	5003/tcp	0.001756	# fmpro-internal | Filemaker Server - http://www.filemaker.com/ti/104289.html | FileMaker, Inc. - Proprietary transport | FileMaker, Inc. - Proprietary name binding
globe	2002/tcp	0.001744
deslogin	2005/tcp	0.001731	# oracle | berknet | encrypted symmetric telnet/login
x25-svc-port	1998/tcp	0.001731	# cisco X.25 service (XOT)
iad3	1032/tcp	0.001719	# BBN IAD
java-or-OTGfileshare	1050/tcp	0.001669	# cma | J2EE nameserver, also OTG, also called Disk/Application extender. Could also be MiniCommand backdoor OTGlicenseserv | CORBA Management Agent
dtspc	6112/tcp	0.001656	# dtspcd | CDE subprocess control | Desk-Top Sub-Process Control Daemon
svn	3690/tcp	0.001597	# Subversion
oracle	1521/tcp	0.001568	# ncube-lm | Oracle Database | nCube License Manager
apc-agent	2161/tcp	0.001521	# apc-2161 | American Power Conversion | APC 2161
X11:2	6002/tcp	0.001518	# X Window server
socks	1080/tcp	0.001518
cvspserver	2401/tcp	0.001480	# CVS network server
lockd	4045/tcp	0.001468	# npp | Network Paging Protocol
iss-realsecure	902/tcp	0.001468	# ideafarm-door | ISS RealSecure Sensor | self documenting Telnet Door | self documenting Door: send 0x00 for info
nsrexecd	7937/tcp	0.001455	# Legato NetWorker
qsc	787/tcp	0.001455
nim	1058/tcp	0.001380
ms-olap4	2383/tcp	0.001369	# MS OLAP 4 | Microsoft OLAP
sometimes-rpc5	32771/tcp	0.001367	# filenet-rmi | Sometimes an RPC port on my Solaris box (rusersd) | FileNET RMI | FileNet RMI
netinfo	1033/tcp	0.001342	# netinfo-local | Netinfo is apparently on many OS X boxes. | local netinfo port
netsaint	1040/tcp	0.001342	# netarx | Netsaint status daemon | Netarx Netcare
nimreg	1059/tcp	0.001342
ibm-db2	50000/tcp	0.001317	# (also Internet/Intranet Input Method Server Framework?)
freeciv	5555/tcp	0.001305	# personal-agent | Personal Agent
scp-config	10001/tcp	0.001292	# SCP Configuration
citrix-ica	1494/tcp	0.001255	# ica
http-rpc-epmap	593/tcp	0.001242	# HTTP RPC Ep Map
compaqdiag	2301/tcp	0.001242	# cpq-wbem | Compaq remote diagnostic/management | Compaq HTTP
compressnet	3/tcp	0.001242	# Compression Process
tcpmux	1/udp	0.001236	# TCP Port Service Multiplexer
globalcatLDAP	3268/tcp	0.001229	# msft-gc | Global Catalog LDAP | Microsoft Global Catalog
lgtomapper	7938/tcp	0.001229	# Legato portmapper
hotline	1234/tcp	0.001217	# search-agent | Infoseek Search Agent
exp2	1022/tcp	0.001217	# RFC3692-style Experiment 2 (*)    [RFC4727] | RFC3692-style Experiment 2
warmspotMgmt	1074/tcp	0.001216	# Warmspot Management Protocol
teradataordbms	8002/tcp	0.001216	# Teradata ORDBMS
nsstp	1036/tcp	0.001216	# Nebula Secure Segment Transfer Protocol
multidropper	1035/tcp	0.001216	# mxxrlogin | A Multidropper Adware, or PhoneFree | MX-XR RPC
tor-orport	9001/tcp	0.001216	# etlservicemgr | Tor ORPort | ETL Service Manager
ams	1037/tcp	0.001216
kpasswd5	464/tcp	0.001192	# Kerberos (v5) | kpasswd
retrospect	497/tcp	0.001179	# Retrospect backup and restore service
rtmp	1935/tcp	0.001179	# macromedia-fcs | Macromedia FlasComm Server | Macromedia Flash Communications Server MX | Macromedia Flash Communications server MX
irc	6666/tcp	0.001179	# internet relay chat server
finger	2003/tcp	0.001179	# brutus | GNU finger (cfingerd) | Brutus Server
mythtv	6543/tcp	0.001167	# lds-distrib | lds_distrib
lotusnotes	1352/tcp	0.001154	# lotusnote | Lotus Note
priv-mail	24/tcp	0.001154	# any private mail system
globalcatLDAPssl	3269/tcp	0.001142	# msft-gc-ssl | Global Catalog LDAP over ssl | Microsoft Global Catalog with LDAP/SSL
lmsocialserver	1111/tcp	0.001140	# LM Social Server
timbuktu	407/tcp	0.001129
isakmp	500/tcp	0.001129
ftp-data	20/tcp	0.001079	# File Transfer [Default Data]
invokator	2006/tcp	0.001066	# raid-cd | raid
iscsi	3260/tcp	0.001064	# iscsi-target | iSCSI port
hydap	15000/tcp	0.001064	# Hypack Hydrographic Software Packages Data Acquisition | Hypack Data Aquisition
aeroflight-ads	1218/tcp	0.001064	# AeroFlight ADs
zincite-a	1034/tcp	0.001064	# activesync | Zincite.A backdoor | ActiveSync Notifications
krb524	4444/tcp	0.001041	# nv-video | Kerberos 5 to 4 ticket xlator | NV Video default
bgmp	264/tcp	0.001029
mailbox	2004/tcp	0.001016	# emce | CCWS mm conf
dsp	33/tcp	0.001016	# Display Support Protocol
afrog	1042/tcp	0.000988	# Subnet Roaming
caerpc	42510/tcp	0.000988	# CA eTrust RPC
garcon	999/tcp	0.000966	# puprouter | applix | Applix ac
powerchute	3052/tcp	0.000966	# apc-3052 | APC 3052
netvenuechat	1023/tcp	0.000953	# Nortel NetVenue Notification, Chat, Intercom
instl_bootc	1068/tcp	0.000941	# instl-bootc | Installation Bootstrap Proto. Cli.
rsh-spx	222/tcp	0.000941	# Berkeley rshd with SPX auth
font-service	7100/tcp	0.000928	# X Font Service
accessbuilder	888/tcp	0.000928	# cddbp | or Audio CD Database | CD Database Protocol
squid-htcp	4827/udp	0.000923	# Squid proxy HTCP port
tcp-id-port	1999/udp	0.000923	# cisco identification port
snews	563/tcp	0.000916	# nntps | nntp protocol over TLS/SSL (was snntp)
fj-hdnet	1717/tcp	0.000912
conf	2008/tcp	0.000903	# terminaldb
telnets	992/tcp	0.000903	# telnet protocol over TLS/SSL
sometimes-rpc3	32770/tcp	0.000903	# filenet-nch | Sometimes an RPC port on my Solaris box | Filenet NCH
sometimes-rpc7	32772/tcp	0.000891	# filenet-pa | Sometimes an RPC port on my Solaris box (status) | FileNET Process Analyzer
afs3-callback	7001/tcp	0.000891	# callbacks to cache managers
blackice-alerts	8082/tcp	0.000878	# us-cli | BlackIce Alerts sent to this port | Utilistor (Client)
dectalk	2007/tcp	0.000878	# raid-am
netcp	740/udp	0.000873	# NETscout Control Protocol
sdadmind	5550/tcp	0.000853	# cbus | ACE/Server services | Model Railway control using the CBUS message protocol
news	2009/tcp	0.000841	# whosockami
vnc-http-1	5801/tcp	0.000841	# Virtual Network Computer HTTP Access, display 1
boinc	1043/tcp	0.000841	# boinc-client | BOINC Client Control or Microsoft IIS | BOINC Client Control
exec	512/tcp	0.000841	# biff | comsat | BSD rexecd(8) | remote process execution; authentication performed using passwords and UNIX login names | used by mail system to notify users of new mail received; currently receives messages only from processes on the same machine
sms-rcinfo	2701/tcp	0.000836	# SMS RCINFO
doceri-ctl	7019/tcp	0.000836	# doceri-view | doceri drawing service control | doceri drawing service screen view
unknown	50001/tcp	0.000836
mps-raft	1700/tcp	0.000836
edonkey	4662/tcp	0.000828	# oms | eDonkey file sharing (Donkey) | OrbitNet Message Service
dlsrpn	2065/tcp	0.000815	# Data Link Switch Read Port Number
search	2010/tcp	0.000803	# pipe_server | pipe-server | Or nfr411
nameserver	42/tcp	0.000803	# name | Host Name Server
man	9535/tcp	0.000790	# mngsuite | Management Suite Remote Control
ripd	2602/tcp	0.000790	# discp-server | RIPd vty | discp server
dec-notes	3333/tcp	0.000790	# DEC Notes
snmp	161/tcp	0.000790
admd	5100/tcp	0.000778	# socalia | (chili!soft asp admin port) or Yahoo pager | Socalia service mux
rfe	5002/tcp	0.000765	# Radio Free Ethernet | radio free ethernet
ospfd	2604/tcp	0.000765	# nsc-ccs | OSPFd vty | NSC CCS
mlchat-proxy	4002/tcp	0.000765	# mlnet - MLChat P2P chat proxy | pxc-spvr-ft
X11:59	6059/tcp	0.000760	# X Window server
neod1	1047/tcp	0.000760	# Sun's NEO Object Request Broker
sophos	8192/tcp	0.000760	# spytechphone | Sophos Remote Management System | SpyTech Phone Service
sophos	8193/tcp	0.000760	# Sophos Remote Management System
sms-xfer	2702/tcp	0.000760	# SMS XFER
ibm-db2-admin	6789/tcp	0.000760	# radg | smc-https | IBM DB2 | SMC-HTTPS | GSS-API for the Oracle Remote Administration Daemon
pds	9595/tcp	0.000760	# Ping Discovery System | Ping Discovery Service
optima-vnet	1051/tcp	0.000760	# Optima VNET
netassistant	3283/tcp	0.000760	# net-assistant | #ERROR:Apple Remote Desktop (Net Assistant) | Apple Remote Desktop Net Assistant reporting feature | Net Assistant
msgsys	9594/tcp	0.000760	# Message System
cba8	9593/tcp	0.000760	# LANDesk Management Agent (cba8)
amt-soap-https	16993/tcp	0.000760	# Intel(R) AMT SOAP/HTTPS
amt-soap-http	16992/tcp	0.000760	# Intel(R) AMT SOAP/HTTP
hp-status	5226/tcp	0.000760	# HP Status
hp-server	5225/tcp	0.000760	# HP Server
filenet-rpc	32769/tcp	0.000760	# Filenet RPC
ddt	1052/tcp	0.000760	# Dynamic DNS tools | Dynamic DNS Tools
sophos	8194/tcp	0.000760	# blp1 | Sophos Remote Management System | Bloomberg data API
ansyslmd	1055/tcp	0.000760	# ANSYS - License Manager
veracity	1062/tcp	0.000760
unknown	9415/tcp	0.000760
unknown	8701/tcp	0.000760
unknown	8652/tcp	0.000760
unknown	8651/tcp	0.000760
unknown	8089/tcp	0.000760
unknown	65389/tcp	0.000760
unknown	65000/tcp	0.000760
unknown	64680/tcp	0.000760
unknown	64623/tcp	0.000760
unknown	55600/tcp	0.000760
unknown	55555/tcp	0.000760
unknown	52869/tcp	0.000760
unknown	35500/tcp	0.000760
unknown	33354/tcp	0.000760
unknown	23502/tcp	0.000760
unknown	20828/tcp	0.000760
rxmon	1311/tcp	0.000760
polestar	1060/tcp	0.000760
pharos	4443/tcp	0.000760
netviewdm2	730/udp	0.000758	# IBM NetView DM/6000 send/tcp
netviewdm3	731/udp	0.000741	# IBM NetView DM/6000 receive/tcp
entrustmanager	709/udp	0.000741	# EntrustManager - NorTel DES auth network see 389/tcp
instl_boots	1067/tcp	0.000728	# instl-boots | Installation Bootstrap Proto. Serv.
netbackup	13782/tcp	0.000728	# bpcd | bpcd          client | VERITAS NetBackup
vnc-2	5902/tcp	0.000715	# Virtual Network Computer display 2
odmr	366/tcp	0.000715
tor-socks	9050/tcp	0.000703	# versiera | Tor SocksPort, www.torproject.org | Versiera Agent Listener
windows-icfw	1002/tcp	0.000690	# Windows Internet Connection Firewall or Internet Locator Server for NetMeeting.
mit-ml-dev	85/tcp	0.000690	# MIT ML Device
hotline	5500/tcp	0.000690	# Hotline file sharing client/server | fcp-addr-srvr1
park-agent	5431/tcp	0.000684	# PARK AGENT
paradym-31	1864/tcp	0.000684	# paradym-31port | Paradym 31 Port
msnp	1863/tcp	0.000684	# MSN Messenger
unknown	8085/tcp	0.000684
unknown	51103/tcp	0.000684
unknown	49999/tcp	0.000684
unknown	45100/tcp	0.000684
unknown	10243/tcp	0.000684
tacacs	49/tcp	0.000665	# Login Host Protocol (TACACS)
seclayer-tcp	3495/udp	0.000661	# securitylayer over tcp
irc	6667/tcp	0.000652	# Internet Relay Chat
dnsix	90/tcp	0.000652	# DNSIX Securit Attribute Token Map
tcpnethaspsrv	475/udp	0.000643
flexlm0	27000/tcp	0.000640	# FlexLM license manager additional ports
imtc-mcs	1503/tcp	0.000640	# Databeam
bittorrent-tracker	6881/tcp	0.000640	# BitTorrent tracker
vlsi-lm	1500/tcp	0.000627	# VLSI License Manager
ftp-proxy	8021/tcp	0.000627	# intu-ec-client | Common FTP proxy port | Intuit Entitlement Client
unknown	340/tcp	0.000627
vettcp	78/udp	0.000626
westec-connect	5566/tcp	0.000608	# Westec Connect
radan-http	8088/tcp	0.000608	# Radan HTTP
EtherNetIP-1	2222/tcp	0.000608	# EtherNet/IP-1 | EtherNet-IP-1 | EtherNet/IP I/O
unknown	9071/tcp	0.000608
ospf-lite	8899/tcp	0.000608
X11:5	6005/tcp	0.000602	# X Window server
sd	9876/tcp	0.000602	# Session Director
sas-3	1501/tcp	0.000602	# saiscm | Satellite-data Acquisition System 3
admeng	5102/tcp	0.000602	# oms-nonsecure | (chili!soft asp) | Oracle OMS non-secure
sometimes-rpc11	32774/tcp	0.000602	# filenet-re | Sometimes an RPC port on my Solaris box (rusersd) | FileNET Rules Engine
sometimes-rpc9	32773/tcp	0.000602	# filenet-cm | Sometimes an RPC port on my Solaris box (rquotad) | FileNET Component Manager
jetdirect	9101/tcp	0.000602	# bacula-dir | HP JetDirect card | Bacula Director
activesync	5679/tcp	0.000590	# dccm | Microsoft ActiveSync PDY synchronization | Direct Cable Connect Manager
cmip-man	163/tcp	0.000590	# CMIP/TCP Manager
rrp	648/tcp	0.000577	# Registry Registrar Protocol (RRP)
iso-tp0	146/tcp	0.000577	# ISO-IP0
netview-aix-6	1666/tcp	0.000577
samba-swat	901/tcp	0.000552	# smpnameres | Samba SWAT tool.  Also used by ISS RealSecure. | SMPNAMERES
mit-ml-dev	83/tcp	0.000539	# MIT ML Device
wap-vcal-s	9207/tcp	0.000532	# WAP vCal Secure
vcom-tunnel	8001/tcp	0.000532	# VCOM Tunnel
us-srv	8083/tcp	0.000532	# Utilistor (Server)
websnp	8084/tcp	0.000532	# Snarl Network Protocol over HTTP
avt-profile-1	5004/tcp	0.000532	# RTP media data [RFC 3551][RFC 4571] | RTP media data
nppmp	3476/tcp	0.000532	# NVIDIA Mgmt Protocol
unknown	5214/tcp	0.000532
unknown	14238/tcp	0.000532
netbus	12345/tcp	0.000527	# italk | NetBus backdoor trojan or Trend Micro Office Scan | Italk Chat System
apex-mesh	912/tcp	0.000527	# APEX relay-relay service
unknown	30/tcp	0.000527
bgpd	2605/tcp	0.000514	# nsc-posa | BGPd vty | NSC POSA
device2	2030/tcp	0.000514
unknown	6/tcp	0.000502
uucp-rlogin	541/tcp	0.000489
ajp12	8007/tcp	0.000477	# warppipe | Apache JServ Protocol 1.x | I/O oriented cluster computing software
deslogin	3005/tcp	0.000477	# geniuslm | encrypted symmetric telnet/login | Genius License Manager
unknown	4/tcp	0.000477
hermes	1248/tcp	0.000477
rtsserv	2500/tcp	0.000464	# Resource Tracking system server
unknown	880/tcp	0.000464
unknown	306/tcp	0.000464
vrml-multi-use	4242/tcp	0.000456	# VRML Multi User Systems or CrashPlan http://support.code42.com/CrashPlan/Latest/Configuring/Network#Networking_FAQs
sunclustermgr	1097/tcp	0.000456	# Sun Cluster Manager
pichat	9009/tcp	0.000456	# Pichat Server
ms-v-worlds	2525/tcp	0.000456	# MS V-Worlds
winbox	8291/tcp	0.000456	# Mikrotik WinBox
cplscrambler-lg	1086/tcp	0.000456	# CPL Scrambler Logging
cplscrambler-al	1088/tcp	0.000456	# CPL Scrambler Alarm Log
unknown	52822/tcp	0.000456
backupexec	6101/tcp	0.000452	# synchronet-rtc | Backup Exec UNIX and 95/98/ME Aent | SynchroNet-rtc
omginitialrefs	900/tcp	0.000452	# OMG Initial Refs
fodms	7200/tcp	0.000439	# FODMS FLIP
corbaloc	2809/tcp	0.000439	# Corba | CORBA LOC
netcp	395/udp	0.000428	# NETscout Control Protocol
mdbs_daemon	800/tcp	0.000427	# mdbs-daemon
sometimes-rpc13	32775/tcp	0.000427	# filenet-pch | Sometimes an RPC port on my Solaris box (status) | Performance Clearinghouse
cce4x	12000/tcp	0.000427	# entextxid | ClearCommerce Engine 4.x (www.clearcommerce.com) | IBM Enterprise Extender SNA XID Exchange
ansoft-lm-1	1083/tcp	0.000427	# Anasoft License Manager
914c-g	211/tcp	0.000427	# 914c/g | Texas Instruments 914C/G Terminal
unknown	987/tcp	0.000427
agentx	705/tcp	0.000414
btx	20005/tcp	0.000401	# openwebnet | xcept4 (Interacts with German Telekom's CEPT videotext service) | OpenWebNet protocol for electric network
cisco-tdp	711/tcp	0.000401	# Cisco TDP
netbackup	13783/tcp	0.000389	# vopied | vopied        client | VOPIED Protocol
acmsoda	6969/tcp	0.000389
csd-mgmt-port	3071/tcp	0.000380	# xplat-replicate | ContinuStor Manager Port | Crossplatform replication protocol
xmpp-server	5269/tcp	0.000380	# XMPP Server Connection
xmpp-client	5222/tcp	0.000380	# XMPP Client Connection
webobjects	1085/tcp	0.000380	# Web Objects
wfremotertm	1046/tcp	0.000380	# WebFilter Remote Monitor
wsmans	5986/tcp	0.000380	# WBEM WS-Management HTTP over TLS/SSL
wsman	5985/tcp	0.000380	# WBEM WS-Management HTTP
wbem-rmi	5987/tcp	0.000380	# WBEM RMI
wbem-https	5989/tcp	0.000380	# WBEM CIM-XML (HTTPS)
wbem-http	5988/tcp	0.000380	# WBEM CIM-XML (HTTP)
tivoconnect	2190/tcp	0.000380	# TiVoConnect Beacon
tarantool	3301/tcp	0.000380	# Tarantool in-memory computing platform
sysinfo-sp	11967/tcp	0.000380	# SysInfo Service Protocol | SysInfo Sercice Protocol
asterix	8600/tcp	0.000380	# Surveillance Data
sitewatch-s	3766/tcp	0.000380	# SSL e-watch sitewatch server
soap-http	7627/tcp	0.000380	# SOAP Service Port
simplifymedia	8087/tcp	0.000380	# Simplify Media SPP Protocol
ndmps	30000/tcp	0.000380	# Secure Network Data Management Protocol
sdr	9010/tcp	0.000380	# Secure Data Replicator Protocol
scriptview	7741/tcp	0.000380	# ScriptView Network
scotty-ft	14000/tcp	0.000380	# SCOTTY High-Speed Filetransfer
satvid-datalnk	3367/tcp	0.000380	# Satellite Video Data Link
rmiregistry	1099/tcp	0.000380	# RMI Registry
rmiactivation	1098/tcp	0.000380	# RMI Activation
eppc	3031/tcp	0.000380	# Remote AppleEvents/PPC Toolbox
pn-requester2	2718/tcp	0.000380	# PN REQUESTER 2
parsec-master	6580/tcp	0.000380	# Parsec Masterserver
onep-tls	15002/tcp	0.000380	# Open Network Environment TLS
nuauth	4129/tcp	0.000380	# NuFW authentication protocol
jetstream	6901/tcp	0.000380	# Novell Jetstream messaging protocol
netmpi	3827/tcp	0.000380	# Netadmin Systems MPI service
nati-svrloc	3580/tcp	0.000380	# NATI-ServiceLocator
lv-ffx	2144/tcp	0.000380	# Live Vault Fast Object Transfer
intermapper	8181/tcp	0.000380	# Intermapper network management system
ibm-mgr	3801/tcp	0.000380	# ibm manager service
h323gatedisc	1718/tcp	0.000380	# H.323 Multicast Gatekeeper Discover
gsiftp	2811/tcp	0.000380	# GSI FTP
glrpc	9080/tcp	0.000380	# Groove GLRPC
gris	2135/tcp	0.000380	# Grid Resource Information Server
fpitp	1045/tcp	0.000380	# Fingerprint Image Transfer Protocol
fmpro-fdal	2399/tcp	0.000380	# FileMaker, Inc. - Data Access Layer
event_listener	3017/tcp	0.000380	# event-listener | Event Listener
documentum	10002/tcp	0.000380	# EMC-Documentum Content Server Product
elfiq-repl	1148/tcp	0.000380	# Elfiq Replication Service
dynamid	9002/tcp	0.000380	# DynamID authentication
dxspider	8873/tcp	0.000380	# dxspider linking protocol
dxmessagebase2	2875/tcp	0.000380	# DX Message Base Transport Protocol
d-star	9011/tcp	0.000380	# D-Star Routing digital voice+data for amateur radio
dpm	5718/tcp	0.000380	# DPM Communication Server
d-s-n	8086/tcp	0.000380	# Distributed SCADA Networking Rendezvous Port
dnp	20000/tcp	0.000380	# Distributed Network Protocol
dnx	3998/tcp	0.000380	# Distributed Nagios Executor Service
connection	2607/tcp	0.000380	# Dell Connection
sgi-soap	11110/tcp	0.000380	# Data migration facility (DMF) SOAP is a web server protocol to support remote access to DMF
ddrepl	4126/tcp	0.000380	# Data Domain Replication Service
condor	9618/tcp	0.000380	# Condor Collector Service
compaq-https	2381/tcp	0.000380	# Compaq HTTPS
cnrprotocol	1096/tcp	0.000380	# Common Name Resolution Protocol
ceph	3300/tcp	0.000380	# Ceph monitor
btrieve	3351/tcp	0.000380	# Btrieve port
bridgecontrol	1073/tcp	0.000380	# Bridge Control
bitcoin	8333/tcp	0.000380	# Bitcoin crypto currency - https://en.bitcoin.it/wiki/Running_Bitcoin
bfd-control	3784/tcp	0.000380	# BFD Control Protocol
beorl	5633/tcp	0.000380	# BE Operations Request Listener
bex-xr	15660/tcp	0.000380	# Backup Express Restore Server
backup-express	6123/tcp	0.000380	# Backup Express
avsecuremgmt	3211/tcp	0.000380	# Avocent Secure Management
avocent-proxy	1078/tcp	0.000380	# Avocent Proxy Protocol
cm	5910/tcp	0.000380	# ats-atn | Context Management | Air Traffic Services applications using ATN
cpdlc	5911/tcp	0.000380	# ats-acars | Controller Pilot Data Link Communication | Air Traffic Services applications using ACARS
apple-sasl	3659/tcp	0.000380	# Apple SASL
apcupsd	3551/tcp	0.000380	# Apcupsd Information Port
apc-2260	2260/tcp	0.000380	# APC 2260
apc-2160	2160/tcp	0.000380	# APC 2160
amiganetfs	2100/tcp	0.000380	# Amiga Network Filesystem
fmsascon	16001/tcp	0.000380	# Administration Server Connector
active-net	3325/tcp	0.000380	# Active Networks
active-net	3323/tcp	0.000380	# Active Networks
xrl	1104/tcp	0.000380
unknown	9968/tcp	0.000380
unknown	9503/tcp	0.000380
unknown	9502/tcp	0.000380
unknown	9485/tcp	0.000380
unknown	9290/tcp	0.000380
unknown	9220/tcp	0.000380
unknown	8994/tcp	0.000380
unknown	8649/tcp	0.000380
unknown	8222/tcp	0.000380
unknown	7911/tcp	0.000380
unknown	7625/tcp	0.000380
unknown	7106/tcp	0.000380
unknown	65129/tcp	0.000380
unknown	63331/tcp	0.000380
unknown	6156/tcp	0.000380
unknown	6129/tcp	0.000380
unknown	60020/tcp	0.000380
unknown	5962/tcp	0.000380
unknown	5961/tcp	0.000380
unknown	5960/tcp	0.000380
unknown	5959/tcp	0.000380
unknown	5925/tcp	0.000380
unknown	5877/tcp	0.000380
unknown	5825/tcp	0.000380
unknown	5810/tcp	0.000380
unknown	58080/tcp	0.000380
unknown	57294/tcp	0.000380
unknown	50800/tcp	0.000380
unknown	50006/tcp	0.000380
unknown	50003/tcp	0.000380
unknown	49160/tcp	0.000380
unknown	49159/tcp	0.000380
unknown	49158/tcp	0.000380
unknown	48080/tcp	0.000380
unknown	40193/tcp	0.000380
unknown	34573/tcp	0.000380
unknown	34572/tcp	0.000380
unknown	34571/tcp	0.000380
unknown	3404/tcp	0.000380
unknown	33899/tcp	0.000380
unknown	32782/tcp	0.000380
unknown	32781/tcp	0.000380
unknown	31038/tcp	0.000380
unknown	30718/tcp	0.000380
unknown	28201/tcp	0.000380
unknown	27715/tcp	0.000380
unknown	25734/tcp	0.000380
unknown	24800/tcp	0.000380
unknown	22939/tcp	0.000380
unknown	21571/tcp	0.000380
unknown	20221/tcp	0.000380
unknown	20031/tcp	0.000380
unknown	19842/tcp	0.000380
unknown	19801/tcp	0.000380
unknown	19101/tcp	0.000380
unknown	17988/tcp	0.000380
unknown	1783/tcp	0.000380
unknown	16018/tcp	0.000380
unknown	16016/tcp	0.000380
unknown	15003/tcp	0.000380
unknown	14442/tcp	0.000380
unknown	13456/tcp	0.000380
unknown	10629/tcp	0.000380
unknown	10628/tcp	0.000380
unknown	10626/tcp	0.000380
unknown	10621/tcp	0.000380
unknown	10617/tcp	0.000380
unknown	10616/tcp	0.000380
unknown	10566/tcp	0.000380
unknown	10025/tcp	0.000380
unknown	10024/tcp	0.000380
unknown	10012/tcp	0.000380
tripwire	1169/tcp	0.000380
surfpass	5030/tcp	0.000380
statusd	5414/tcp	0.000380
startron	1057/tcp	0.000380
smc-http	6788/tcp	0.000380
sentinelsrm	1947/tcp	0.000380
rootd	1094/tcp	0.000380
rdrmshc	1075/tcp	0.000380
ratio-adp	1108/tcp	0.000380
pxc-splr-ft	4003/tcp	0.000380
pvuniwien	1081/tcp	0.000380
proofd	1093/tcp	0.000380
privatewire	4449/tcp	0.000380
nsjtp-ctrl	1687/tcp	0.000380
netopia-vo2	1840/tcp	0.000380
mctp	1100/tcp	0.000380
kyoceranetdev	1063/tcp	0.000380
kiosk	1061/tcp	0.000380
iua	9900/tcp	0.000380
isoipsigport-2	1107/tcp	0.000380
isoipsigport-1	1106/tcp	0.000380
ismserver	9500/tcp	0.000380
ipulse-ics	20222/tcp	0.000380
interwise	7778/tcp	0.000380
imgames	1077/tcp	0.000380
husky	1310/tcp	0.000380
gsigatekeeper	2119/tcp	0.000380
groove	2492/tcp	0.000380
gmrupdateserv	1070/tcp	0.000380
cvd	8400/tcp	0.000380
cspmlockmgr	1272/tcp	0.000380
clariion-evr01	6389/tcp	0.000380
cbt	7777/tcp	0.000380
cardax	1072/tcp	0.000380
asprovatalk	1079/tcp	0.000380
amt-esd-prot	1082/tcp	0.000380
abarsd	8402/tcp	0.000380
su-mit-tg	89/tcp	0.000376	# SU/MIT Telnet Gateway
resvc	691/tcp	0.000376	# msexch-routing | The Microsoft Exchange 2000 Server Routing Service | MS Exchange Routing
webpush	1001/tcp	0.000364	# HTTP Web Push
sometimes-rpc15	32776/tcp	0.000364	# filenet-peior | Sometimes an RPC port on my Solaris box (sprayd) | FileNET BPM IOR
tcp-id-port	1999/tcp	0.000364	# cisco identification port
anet	212/tcp	0.000364	# ATEXSSTR
xinupageserver	2020/tcp	0.000364
X11:3	6003/tcp	0.000351	# X Window server
afs3-prserver	7002/tcp	0.000351	# users & groups database
iss-realsec	2998/tcp	0.000351	# realsecure | ISS RealSecure IDS Remote Console Admin port | Real Secure
iiimsf	50002/tcp	0.000351	# Internet/Intranet Input Method Server Framework
msdtc	3372/tcp	0.000339	# tip2 | MS distributed transaction coordinator | TIP 2
sun-manageconsole	898/tcp	0.000339	# Solaris Management Console Java listener (Solaris 8 & 9)
secureidprop	5510/tcp	0.000339	# ACE/Server services
unknown	32/tcp	0.000339
glogger	2033/tcp	0.000339
altcp	4165/udp	0.000330	# ArcLink over Ethernet
cautcpd	3061/udp	0.000330
metagram	99/tcp	0.000326	# Metagram Relay
kerberos-adm	749/tcp	0.000326	# Kerberos 5 admin/changepw | kerberos administration
icad-el	425/tcp	0.000326	# ICAD
vnc-3	5903/tcp	0.000326	# ff-ice | Virtual Network Computer display 3 | Flight & Flow Info for Collaborative Env
whois	43/tcp	0.000314	# nicname | Who Is
pcduo	5405/tcp	0.000314	# netsupport | RemCon PC-Duo - new port | NetSupport
isdninfo	6106/tcp	0.000314	# mpsserver | i4lmond | MPS Server
netbackup	13722/tcp	0.000314	# bpjava-msvc | bpjava-msvc   client | BP Java MSVC Protocol
netop-rc	6502/tcp	0.000314	# boks_servm | boks-servm | NetOp Remote Control (by Danware Data A/S) | BoKS Servm
afs3-bos	7007/tcp	0.000314	# basic overseer process
appleqtc	458/tcp	0.000314	# apple quick time
zoomcp	9666/tcp	0.000304	# Zoom Control Panel Game Server Management
xprint-server	8100/tcp	0.000304	# Xprint Server
xpanel	3737/tcp	0.000304	# XPanel Daemon
presence	5298/tcp	0.000304	# XMPP Link-Local Messaging
winpoplanmess	1152/tcp	0.000304	# Winpopup LAN Messenger
opsmessaging	8090/tcp	0.000304	# Vehicle to station messaging
tvbus	2191/tcp	0.000304	# TvBus Messaging
trusted-web	3011/tcp	0.000304	# Trusted Web
tn-tl-r1	1580/tcp	0.000304	# tn-tl-r2
x510	9877/tcp	0.000304	# The X.510 wrapper protocol
targus-getdata	5200/tcp	0.000304	# TARGUS GetData
spectraport	3851/tcp	0.000304	# SpectraTalk Port
satvid-datalnk	3371/tcp	0.000304	# Satellite Video Data Link
satvid-datalnk	3370/tcp	0.000304	# Satellite Video Data Link
satvid-datalnk	3369/tcp	0.000304	# Satellite Video Data Link
rtps-dd-mt	7402/tcp	0.000304	# RTPS Data-Distribution Meta-Traffic
rlm-admin	5054/tcp	0.000304	# RLM administrative interface
pktcablemmcops	3918/tcp	0.000304	# PacketCableMultimediaCOPS
orbix-loc-ssl	3077/tcp	0.000304	# Orbix 2000 Locator SSL
oracleas-https	7443/tcp	0.000304	# Oracle Application Server HTTPS
nut	3493/tcp	0.000304	# Network UPS Tools
neteh	3828/tcp	0.000304	# Netadmin Systems Event Handler
mysql-cluster	1186/tcp	0.000304	# MySQL Cluster Manager
vmrdp	2179/tcp	0.000304	# Microsoft RDP for virtual machines
llsurfup-http	1183/tcp	0.000304	# LL Surfup HTTP
keyshadow	19315/tcp	0.000304	# Key Shadow for SASSAFRAS
keysrvr	19283/tcp	0.000304	# Key Server for SASSAFRAS
iss-mgmt-ssl	3995/tcp	0.000304	# ISS Management Svcs SSL
indy	5963/tcp	0.000304	# Indy Application Server
hpvmmcontrol	1124/tcp	0.000304	# HP VMM Control
fmtp	8500/tcp	0.000304	# Flight Message Transfer Protocol
ff-annunc	1089/tcp	0.000304	# FF Annunciation
emcrmirccd	10004/tcp	0.000304	# EMC Replication Manager Client
dif-port	2251/tcp	0.000304	# Distributed Framework Port
cplscrambler-in	1087/tcp	0.000304	# CPL Scrambler Internal
xmpp-bosh	5280/tcp	0.000304	# Bidirectional-streams Over Synchronous HTTP (BOSH)
avocent-adsap	3871/tcp	0.000304	# Avocent DS Authorization
arepa-cas	3030/tcp	0.000304	# Arepa Cas
iphone-sync	62078/tcp	0.000304	# Apparently used by iPhone while syncing - http://code.google.com/p/iphone-elite/source/browse/wiki/Port_62078.wiki
ag-swim	5904/tcp	0.000304	# Air-Ground SWIM
xmltec-xmlmail	9091/tcp	0.000304
xgrid	4111/tcp	0.000304
writesrv	1334/tcp	0.000304
winshadow	3261/tcp	0.000304
windb	2522/tcp	0.000304
wherehoo	5859/tcp	0.000304
visionpyramid	1247/tcp	0.000304
unknown	9944/tcp	0.000304
unknown	9943/tcp	0.000304
unknown	9110/tcp	0.000304
unknown	8654/tcp	0.000304
unknown	8254/tcp	0.000304
unknown	8180/tcp	0.000304
unknown	8011/tcp	0.000304
unknown	7512/tcp	0.000304
unknown	7435/tcp	0.000304
unknown	7103/tcp	0.000304
unknown	61900/tcp	0.000304
unknown	61532/tcp	0.000304
unknown	5922/tcp	0.000304
unknown	5915/tcp	0.000304
unknown	5822/tcp	0.000304
unknown	56738/tcp	0.000304
unknown	55055/tcp	0.000304
unknown	51493/tcp	0.000304
unknown	50636/tcp	0.000304
unknown	50389/tcp	0.000304
unknown	49175/tcp	0.000304
unknown	49165/tcp	0.000304
unknown	49163/tcp	0.000304
unknown	3546/tcp	0.000304
unknown	32784/tcp	0.000304
unknown	27355/tcp	0.000304
unknown	27353/tcp	0.000304
unknown	27352/tcp	0.000304
unknown	24444/tcp	0.000304
unknown	19780/tcp	0.000304
unknown	18988/tcp	0.000304
unknown	16012/tcp	0.000304
unknown	15742/tcp	0.000304
unknown	10778/tcp	0.000304
pxc-spvr	4006/tcp	0.000304
pktcable-cops	2126/tcp	0.000304
n1-fwp	4446/tcp	0.000304
igrs	3880/tcp	0.000304
hp-hcip	1782/tcp	0.000304
dproxy	1296/tcp	0.000304
distinct32	9998/tcp	0.000304
tor-trans	9040/tcp	0.000301	# Tor TransPort, www.torproject.org
sometimes-rpc21	32779/tcp	0.000301	# Sometimes an RPC port on my Solaris box
exp1	1021/tcp	0.000301	# RFC3692-style Experiment 1 (*)    [RFC4727] | RFC3692-style Experiment 1
sometimes-rpc17	32777/tcp	0.000301	# filenet-obrok | Sometimes an RPC port on my Solaris box (walld) | FileNet BPM CORBA
servexec	2021/tcp	0.000289	# xinuexpansion1
sometimes-rpc19	32778/tcp	0.000289	# Sometimes an RPC port on my Solaris box (rstatd)
sco-sysmgr	616/tcp	0.000289	# SCO System Administration Server
doom	666/tcp	0.000289	# mdqs | Id Software Doom | doom Id Software
epp	700/tcp	0.000289	# Extensible Provisioning Protocol
vnc-http-2	5802/tcp	0.000276	# Virtual Network Computer HTTP Access, display 2
rwhois	4321/tcp	0.000276	# Remote Who Is
ekshell	545/tcp	0.000276	# Kerberos encrypted remote shell -kfall | appleqtcsrvr
ingreslock	1524/tcp	0.000276	# ingres
msql	1112/tcp	0.000276	# icp | mini-sql server | Intelligent Communication Protocol
compaqdiag	49400/tcp	0.000276	# Compaq Web-based management
ctf	84/tcp	0.000276	# Common Trace Facility
landesk-cba	38292/tcp	0.000276
lam	2040/tcp	0.000276
sometimes-rpc23	32780/tcp	0.000263	# Sometimes an RPC port on my Solaris box
deslogind	3006/tcp	0.000263	# ii-admin | Instant Internet Admin
kx	2111/tcp	0.000263	# dsatp | X over kerberos | OPNET Dynamic Sampling Agent Transaction Protocol
ansoft-lm-2	1084/tcp	0.000263	# Anasoft License Manager
issd	1600/tcp	0.000263
dls-monitor	2048/tcp	0.000263
sybase	2638/tcp	0.000251	# sybaseanywhere | Sybase database | Sybase Anywhere
DragonIDSConsole	9111/tcp	0.000251	# hexxorecore | Dragon IDS Console | Multiple Purpose, Distributed Message Bus
napster	6699/tcp	0.000251	# babel-dtls | Napster File (MP3) sharing  software | Babel Routing Protocol over DTLS
osxwebadmin	16080/tcp	0.000251	# Apple OS X WebAdmin
powerchuteplus	6547/tcp	0.000251	# apc-6547 | APC 6547
X11:7	6007/tcp	0.000238	# X Window server
virtual-places	1533/tcp	0.000238	# Virtual Places Software
isqlplus	5560/tcp	0.000238	# Oracle web enabled SQL interface (version 10g+)
ekshell	2106/tcp	0.000238	# mzap | Kerberos (v4) encrypted rshell | MZAP
ies-lm	1443/tcp	0.000238	# Integrated Engineering Software
disclose	667/tcp	0.000238	# campaign contribution disclosures - SDR Technologies
unknown	720/tcp	0.000238
scoremgr	2034/tcp	0.000238
dsf	555/tcp	0.000238
device	801/tcp	0.000238
x11	6025/tcp	0.000228	# X Window System
xnm-clear-text	3221/tcp	0.000228	# XML NM over TCP
wormux	3826/tcp	0.000228	# warmux | Wormux server | WarMUX game server
wap-wsp	9200/tcp	0.000228	# WAP connectionless session services | WAP connectionless session service
wag-service	2608/tcp	0.000228	# Wag Service
vrml-multi-use	4279/tcp	0.000228	# VRML Multi User Systems
vmsvc-2	7025/tcp	0.000228	# Vormetric Service II
vce	11111/tcp	0.000228	# Viral Computing Environment (VCE)
beserver-msg-q	3527/tcp	0.000228	# VERITAS Backup Exec Server
unizensus	1151/tcp	0.000228	# Unizensus Login Server
trivnet1	8200/tcp	0.000228	# TRIVNET
tmi	8300/tcp	0.000228	# Transport Management Interface
tsa	6689/tcp	0.000228	# Tofino Security Appliance
kca-service	9878/tcp	0.000228	# The KX509 Kerberized Certificate Issuance Protocol in Use in 2012
swdtp-sv	10009/tcp	0.000228	# Systemwalker Desktop Patrol
sunwebadmin	8800/tcp	0.000228	# Sun Web Server Admin Service
unieng	5730/tcp	0.000228	# Steltor's calendar access
ms-olap2	2394/tcp	0.000228	# SQL Server Downlevel OLAP Client Support | MS OLAP 2
ms-olap1	2393/tcp	0.000228	# SQL Server Downlevel OLAP Client Support | MS OLAP 1
msolap-ptp2	2725/tcp	0.000228	# SQL Analysis Server | MSOLAP PTP2
sane-port	6566/tcp	0.000228	# SANE Control Port
cisco-aqos	9081/tcp	0.000228	# Required for Adaptive Quality of Service
rrac	5678/tcp	0.000228	# Remote Replication Agent Connection
rpas-c2	5906/tcp	0.000228	# Remotely Piloted Vehicle C&C
pwgpsi	3800/tcp	0.000228	# Print Services Interface
gds-adppiw-db	4550/tcp	0.000228	# Perman I Interbase Server
onscreen	5080/tcp	0.000228	# OnScreen Data Collection Service
nucleus-sand	1201/tcp	0.000228	# Nucleus Sand Database Server
poweronnud	3168/tcp	0.000228	# Now Up-to-Date Public Server
neto-dcs	3814/tcp	0.000228	# netO DCS
mysql-cm-agent	1862/tcp	0.000228	# MySQL Cluster Manager Agent
mini-sql	1114/tcp	0.000228	# Mini SQL
mcer-port	6510/tcp	0.000228	# MCER Port
mupdate	3905/tcp	0.000228	# Mailbox Update (MUPDATE) protocol
m2mservices	8383/tcp	0.000228	# M2m Services
listcrt-port-2	3914/tcp	0.000228	# ListCREATOR Port 2
lanrevserver	3971/tcp	0.000228	# LANrev Server
apocd	3809/tcp	0.000228	# Java Desktop System Configuration Agent
jtnetd-server	5033/tcp	0.000228	# Janstor Secure Data
imqbrokerd	7676/tcp	0.000228	# iMQ Broker Rendezvous
802-11-iapp	3517/tcp	0.000228	# IEEE 802.11 WLANs WG IAPP
hfcs	4900/tcp	0.000228	# HyperFileSQL Client/Server Database Engine | HFSQL Client/Server Database Engine
ovsam-mgmt	3869/tcp	0.000228	# hp OVSAM MgmtServer Disco
git	9418/tcp	0.000228	# Git revision control system | git pack transfer service
funk-dialout	2909/tcp	0.000228	# Funk Dialout
fotogcad	3878/tcp	0.000228	# FotoG CAD interface
fs-agent	8042/tcp	0.000228	# FireScope Agent
ff-sm	1091/tcp	0.000228	# FF System Management
ff-fms	1090/tcp	0.000228	# FF Fieldbus Message Specification
exasoftport1	3920/tcp	0.000228	# Exasoft IP Port
esp	6567/tcp	0.000228	# eSilo Storage Protocol
encrypted_admin	1138/tcp	0.000228	# encrypted-admin | encrypted admin requests
emcads	3945/tcp	0.000228	# EMCADS Server Port
dossier	1175/tcp	0.000228	# Dossier Server
documentum_s	10003/tcp	0.000228	# documentum-s | EMC-Documentum Content Server Product
dsc	3390/tcp	0.000228	# Distributed Service Coordinator
dsd	5907/tcp	0.000228	# Distress and Safety Data App
dandv-tester	3889/tcp	0.000228	# D and V Tester Control Port
caspssl	1131/tcp	0.000228	# CAC App Service Protocol Encripted
blp3	8292/tcp	0.000228	# Bloomberg professional
biotic	5087/tcp	0.000228	# BIOTIC - Binary Internet of Things Interoperable Communication
bnetgame	1119/tcp	0.000228	# Battle.net Chat/Game Protocol
ardus-mtrns	1117/tcp	0.000228	# ARDUS Multicast Transfer
appserv-http	4848/tcp	0.000228	# App Server - Admin HTTP
asr	7800/tcp	0.000228	# Apple Software Restore
fmsas	16000/tcp	0.000228	# Administration Server Access
active-net	3324/tcp	0.000228	# Active Networks
active-net	3322/tcp	0.000228	# Active Networks
3exmp	5221/tcp	0.000228	# 3eTI Extensible Management Protocol for OAMP
upnotifyp	4445/tcp	0.000228
unknown	9917/tcp	0.000228
unknown	9575/tcp	0.000228
unknown	9099/tcp	0.000228
unknown	9003/tcp	0.000228
unknown	8290/tcp	0.000228
unknown	8099/tcp	0.000228
unknown	8093/tcp	0.000228
unknown	8045/tcp	0.000228
unknown	7921/tcp	0.000228
unknown	7920/tcp	0.000228
unknown	7496/tcp	0.000228
unknown	6839/tcp	0.000228
unknown	6792/tcp	0.000228
unknown	6779/tcp	0.000228
unknown	6692/tcp	0.000228
unknown	6565/tcp	0.000228
unknown	60443/tcp	0.000228
unknown	5952/tcp	0.000228
unknown	5950/tcp	0.000228
unknown	5862/tcp	0.000228
unknown	5850/tcp	0.000228
unknown	5815/tcp	0.000228
unknown	5811/tcp	0.000228
unknown	57797/tcp	0.000228
unknown	56737/tcp	0.000228
unknown	5544/tcp	0.000228
unknown	55056/tcp	0.000228
unknown	5440/tcp	0.000228
unknown	54328/tcp	0.000228
unknown	54045/tcp	0.000228
unknown	52848/tcp	0.000228
unknown	52673/tcp	0.000228
unknown	50500/tcp	0.000228
unknown	50300/tcp	0.000228
unknown	49176/tcp	0.000228
unknown	49167/tcp	0.000228
unknown	49161/tcp	0.000228
unknown	44501/tcp	0.000228
unknown	44176/tcp	0.000228
unknown	41511/tcp	0.000228
unknown	40911/tcp	0.000228
unknown	32785/tcp	0.000228
unknown	32783/tcp	0.000228
unknown	30951/tcp	0.000228
unknown	27356/tcp	0.000228
unknown	26214/tcp	0.000228
unknown	25735/tcp	0.000228
unknown	19350/tcp	0.000228
unknown	18101/tcp	0.000228
unknown	18040/tcp	0.000228
unknown	17877/tcp	0.000228
unknown	16113/tcp	0.000228
unknown	15004/tcp	0.000228
unknown	14441/tcp	0.000228
unknown	12265/tcp	0.000228
unknown	12174/tcp	0.000228
unknown	10215/tcp	0.000228
unknown	10180/tcp	0.000228
tram	4567/tcp	0.000228
synchronet-db	6100/tcp	0.000228
sip-tls	5061/tcp	0.000228
pxc-roid	4004/tcp	0.000228
pxc-pin	4005/tcp	0.000228
oa-system	8022/tcp	0.000228
monkeycom	9898/tcp	0.000228
irdmi2	7999/tcp	0.000228
excw	1271/tcp	0.000228
dmidi	1199/tcp	0.000228
cgms	3003/tcp	0.000228
availant-mgr	1122/tcp	0.000228
3d-nfsd	2323/tcp	0.000228
xtell	4224/tcp	0.000226	# Xtell messenging server
down	2022/tcp	0.000226	# xinuexpansion2
sco-dtmgr	617/tcp	0.000226	# SCO Desktop Administration Server or Arkeia (www.arkeia.com) backup software | SCO Desktop Administration Server
multiling-http	777/tcp	0.000226	# Multiling HTTP
onmux	417/tcp	0.000226	# Meeting maker
iris-xpcs	714/tcp	0.000226	# IRIS over XPCS
gnutella	6346/tcp	0.000226	# Gnutella file sharing protocol | gnutella-svc
unknown	981/tcp	0.000226
unknown	722/tcp	0.000226
unknown	1009/tcp	0.000226
maybe-veritas	4998/tcp	0.000226
gopher	70/tcp	0.000226
sns_credit	1076/tcp	0.000213	# dab-sti-c | Shared Network Services (SNS) for Canadian credit card authorizations | DAB STI-C
ncd-conf	5999/tcp	0.000213	# cvsup | NCD configuration telnet port | CVSup
amandaidx	10082/tcp	0.000213	# Amanda indexing
webster	765/tcp	0.000213
unknown	301/tcp	0.000213
ncp	524/tcp	0.000213
mecomm	668/tcp	0.000213
interbase	2041/tcp	0.000213
X11:9	6009/tcp	0.000201	# X Window server
timbuktu-srv1	1417/tcp	0.000201	# Timbuktu Service 1 Port
ms-sql-m	1434/tcp	0.000201	# Microsoft-SQL-Monitor
esro-gen	259/tcp	0.000201	# efficient short remote operations | Efficient Short Remote Operations
coldfusion-auth	44443/tcp	0.000201	# ColdFusion Advanced Security/Siteminder Authentication Port (by Allaire/Netegrity)
bigbrother	1984/tcp	0.000201	# bb | Big Brother monitoring server - www.bb4.com | BB
avocentkvm	2068/tcp	0.000201	# avauthsrvprtcl | Avocent KVM Server | Avocent AuthSrv Protocol
afs3-kaserver	7004/tcp	0.000201	# AFS/Kerberos authentication service
unknown	1007/tcp	0.000201
unicall	4343/tcp	0.000201
silverplatter	416/tcp	0.000201
objectmanager	2038/tcp	0.000201
X11:6	6006/tcp	0.000188	# X Window server
pop2	109/tcp	0.000188	# PostOffice V.2 | Post Office Protocol - Version 2
rww	4125/tcp	0.000188	# opsview-envoy | Microsoft Remote Web Workplace on Small Business Server | Opsview Envoy
ibm_wrless_lan	1461/tcp	0.000188	# ibm-wrless-lan | IBM Wireless LAN
jetdirect	9103/tcp	0.000188	# bacula-sd | HP JetDirect card | Bacula Storage Daemon
xact-backup	911/tcp	0.000188
unknown	726/tcp	0.000188
surf	1010/tcp	0.000188
sdfunc	2046/tcp	0.000188
imsldoc	2035/tcp	0.000188
dlip	7201/tcp	0.000188
asipregistry	687/tcp	0.000188
raid-am	2013/tcp	0.000176	# raid-cd
dvs	481/tcp	0.000176	# ph | Ph service
locus-map	125/tcp	0.000176	# Locus PC-Interface Net Map Ser
irc	6669/tcp	0.000176	# Internet Relay Chat
irc	6668/tcp	0.000176	# Internet Relay Chat
iss-console-mgr	903/tcp	0.000176	# ideafarm-panic | ISS Console Manager | self documenting Telnet Panic Door | self documenting Panic Door: send 0x00 for info
esl-lm	1455/tcp	0.000176	# ESL License Manager
corba-iiop	683/tcp	0.000176	# CORBA IIOP
unknown	1011/tcp	0.000176
isis-bcast	2043/tcp	0.000176
dls	2047/tcp	0.000176
fw1-secureremote	256/tcp	0.000163	# rap | also "rap" | RAP
nping-echo	9929/tcp	0.000163	# Nping echo server mode - https://nmap.org/book/nping-man-echo-mode.html - The port frequency is made up to keep it (barely) in top 1000 TCP
ncd-diag	5998/tcp	0.000163	# NCD diagnostic telnet port
imsp	406/tcp	0.000163	# Interactive Mail Support Protocol
Elite	31337/tcp	0.000163	# eldim | Sometimes interesting stuff can be found here | eldim is a secure file upload proxy
coldfusion-auth	44442/tcp	0.000163	# ColdFusion Advanced Security/Siteminder Authentication Port (by Allaire/Netegrity)
spamassassin	783/tcp	0.000163	# Apache SpamAssassin spamd
unknown	843/tcp	0.000163
isis	2042/tcp	0.000163
cdfunc	2045/tcp	0.000163
yo-main	4040/tcp	0.000152	# Yo.net main service
x11	6060/tcp	0.000152	# X Window System
x11	6051/tcp	0.000152	# X Window System
x9-icue	1145/tcp	0.000152	# X9 iCue Show Control
wysdmc	3916/tcp	0.000152	# WysDM Controller
tungsten-https	9443/tcp	0.000152	# WSO2 Tungsten HTTPS
wso2esb-console	9444/tcp	0.000152	# WSO2 ESB Administration Console HTTPS
westell-stats	1875/tcp	0.000152	# westell stats
watchme-7272	7272/tcp	0.000152	# WatchMe Monitoring 7272
vrml-multi-use	4252/tcp	0.000152	# VRML Multi User Systems
vrml-multi-use	4200/tcp	0.000152	# VRML Multi User Systems
vmsvc	7024/tcp	0.000152	# Vormetric service
veritas_pbx	1556/tcp	0.000152	# veritas-pbx | VERITAS Private Branch Exchange
vnetd	13724/tcp	0.000152	# Veritas Network Utility
mxomss	1141/tcp	0.000152	# User Message Service
univ-appserver	1233/tcp	0.000152	# Universal App Server
ultraseek-http	8765/tcp	0.000152	# Ultraseek HTTP
trim	1137/tcp	0.000152	# TRIM Workgroup Service
thrp	3963/tcp	0.000152	# Teran Hybrid Routing Protocol
teamviewer	5938/tcp	0.000152	# teamviewer - http://www.teamviewer.com/en/help/334-Which-ports-are-used-by-TeamViewer.aspx
sun-as-jpda	9191/tcp	0.000152	# Sun AppSvr JPDA
sun-as-iiops-ca	3808/tcp	0.000152	# Sun App Svr-IIOPClntAuth
sun-as-jmxrmi	8686/tcp	0.000152	# Sun App Server - JMX/RMI
starfish	3981/tcp	0.000152	# Starfish System Admin
sso-service	2710/tcp	0.000152	# SSO Service
sse-app-config	3852/tcp	0.000152	# SSE App Configuration
spw-dnspreload	3849/tcp	0.000152	# SPACEWAY DNS Preload | SPACEWAY DNS Prelaod
sops	3944/tcp	0.000152	# S-Ops Management
sscan	3853/tcp	0.000152	# SONY scanning protocol
nsesrvr	9988/tcp	0.000152	# Software Essentials Secure HTTP server
sddp	1163/tcp	0.000152	# SmartDialer Data Protocol
silverpeakcomm	4164/tcp	0.000152	# Silver Peak Communication Protocol
scp	3820/tcp	0.000152	# Siemens AuD SCP
servicetags	6481/tcp	0.000152	# Service Tags
smap	3731/tcp	0.000152	# Service Manager
ipsdtls	5914/tcp	0.000152	# Security for Internet Protocol Suite
sdl-ets	5081/tcp	0.000152	# SDL - Ent Trans Server
safetynetp	40000/tcp	0.000152	# SafetyNET p
sac	8097/tcp	0.000152	# SAC Port Id
rsip	4555/tcp	0.000152	# RSIP Port
asap-tcp	3863/tcp	0.000152	# RSerPool ASAP (TCP)
routematch	1287/tcp	0.000152	# RouteMatch Com
rsqlserver	4430/tcp	0.000152	# REAL SQL Server
raqmon-pdu	7744/tcp	0.000152	# RAQMON PDU
qo-secure	7913/tcp	0.000152	# QuickObjects secure port
qsm-remote	1166/tcp	0.000152	# QSM RemoteExec
qsm-proxy	1164/tcp	0.000152	# QSM Proxy Service
qsm-gui	1165/tcp	0.000152	# QSM GUI Service
qbdb	8019/tcp	0.000152	# QB DB Dynamic Port
qb-db-server	10160/tcp	0.000152	# QB Database Server
playsta2-app	4658/tcp	0.000152	# PlayStation2 App Port
owms	7878/tcp	0.000152	# Opswise Message Service
opsession-srvr	3304/tcp	0.000152	# OP Session Server
opsession-prxy	3307/tcp	0.000152	# OP Session Proxy