| Echo | Echo | 7 |
| Discard | Discard | 9 |
| Systat | Active Users | 11 |
| Daytime | Daytime (RFC 867) | 13 |
| Qotd | Quote of the Day | 17 |
| Chargen | Character Generator | 19 |
| ftp-data | File Transfer [Default Data] | 20 |
| ftp | File Transfer [Control] | 21 |
| Ssh | SSH Remote Login Protocol | 22 |
| telnet | Telnet | 23 |
| Any private mail system | Any private mail system | 24 |
| Smtp | Simple Mail Transfer | 25 |
| msg-icp | MSG ICP | 29 |
| msg-auth | MSG Authentication | 31 |
| Any private printer server | Any private printer server | 35 |
| Time | Time | 37 |
| Name | Host Name Server | 42 |
| Nameserver | Host Name Server | 42 |
| Nicname | Who Is | 43 |
| Tacacs | Login Host Protocol (TACACS) | 49 |
| re-mail-ck | Remote Mail Checking Protocol | 50 |
| Domain | Domain Name Server | 53 |
| Any private terminal address | Any private terminal address | 57 |
| Any private file service | Any private file service | 59 |
| whois++ | whois++ | 63 |
| tacacs-ds | TACACS-Database Service | 65 |
| sql*net | Oracle SQL*NET | 66 |
| Bootps | Bootstrap Protocol Server | 67 |
| Bootpc | Bootstrap Protocol Client | 68 |
| Tftp | Trivial File Transfer | 69 |
| Gopher | Gopher | 70 |
| Any private dial out service | Any private dial out service | 75 |
| Any private RJE service | Any private RJE service | 77 |
| Finger | Finger | 79 |
| http | World Wide Web HTTP | 80 |
| www | World Wide Web HTTP | 80 |
| www-http | World Wide Web HTTP | 80 |
| hosts2-ns | HOSTS2 Name Server | 81 |
| Xfer | XFER Utility | 82 |
| Any private terminal link | Any private terminal link | 87 |
| Kerberos | Kerberos | 88 |
| Dnsix | DNSIX Security Attribute Token Map | 90 |
| Npp | Network Printing Protocol | 92 |
| Dcp | Device Control Protocol | 93 |
| Objcall | Tivoli Object Dispatcher | 94 |
| acr-nema | ACR-NEMA Digital Imag. & Comm. 300 | 104 |
| Rtelnet | Remote Telnet Service | 107 |
| Snagas | SNA Gateway Access Server | 108 |
| pop2 | Post Office Protocol-Version 2 | 109 |
| pop3 | Post Office Protocol-Version 3 | 110 |
| Sunrpc | SUN Remote Procedure Call | 111 |
| ident/auth | Authentication Service | 113 |
| Audionews | Audio News Multicast | 114 |
| Sftp | Simple File Transfer Protocol | 115 |
| uucp- path | UUCP Path Service | 117 |
| Sqlserv | SQL Services | 118 |
| nntp | Network News Transfer Protocol | 119 |
| Ntp | Network Time Protocol | 123 |
| pwdgen | Password Generator Protocol | 129 |
| cisco-fna | cisco FNATIVE | 130 |
| cisco-tna | cisco TNATIVE | 131 |
| cisco-sys | cisco SYSMAINT | 132 |
| ingres-net | INGRES-NET Service | 134 |
| profile | PROFILE Naming System | 136 |
| netbios-ns | NETBIOS Name Service | 137 |
| netbios-dgm | NETBIOS Datagram Service | 138 |
| netbios-ssn | NETBIOS Session Service | 139 |
| imap | Internet Message Access Protocol | 143 |
| sql-net | SQL-NET | 150 |
| sgmp | SGMP | 153 |
| sqlsrv | SQL Service | 156 |
| pcmail-srv | PCMail Server | 158 |
| sgmp-traps | SGMP-TRAPS | 160 |
| snmp | SNMP | 161 |
| snmptrap | SNMPTRAP | 162 |
| cmip-man | CMIP/TCP Manager | 163 |
| send | SEND | 169 |
| print-srv | Network PostScript | 170 |
| xyplex-mux | Xyplex | 173 |
| mailq | MAILQ | 174 |
| vmnet | VMNET | 175 |
| xdmcp | X Display Manager Control Protocol | 177 |
| bgp | Border Gateway Protocol | 179 |
| mumps | Plus Five's MUMPS | 188 |
| irc | Internet Relay Chat Protocol | 194 |
| dn6-nim-aud | DNSIX Network Level Module Audit | 195 |
| dn6-smm-red | DNSIX Session Mgt Module Audit Redir | 196 |
| dls | Directory Location Service | 197 |
| dls-mon | Directory Location Service Monitor | 198 |
| src | IBM System Resource Controller | 200 |
| at-rtmp | AppleTalk Routing Maintenance | 201 |
| at-nbp | AppleTalk Name Binding | 202 |
| at-3 | AppleTalk Unused | 203 |
| at-echo | AppleTalk Echo | 204 |
| at-5 | ApplTalk Unused | 205 |
| at-zis | AppleTalk Zone Information | 206 |
| at-7 | AppleTalk Unused | 207 |
| at-8 | AppleTalk Unused | 208 |
| qmtp | The Quick Mail Transfer Protocol | 209 |
| ipx | IPX | 213 |
| vmpwscs | VM PWSCS | 214 |
| softpc | Insignia Solutions | 215 |
| dbase | dBASE Unix | 217 |
| imap3 | Interactive Mail Access Protocol v3 | 220 |
| http-mgmt | http-mgmt | 280 |
| asip-webadmin | AppleShare IP WebAdmin | 311 |
| ptp-event | PTP Event | 319 |
| ptp-general | PTP General | 320 |
| pdap | Prospero Data Access Protocol | 344 |
| rsvp_tunnel | RSVP Tunnel | 363 |
| rpc2portmap | rpc2portmap | 369 |
| aurp | AppleTalk Update-Based Routing Protocol | 387 |
| ldap | Lightweight Directory Access Protocol | 389 |
| netcp | NETscout Control Protocol | 395 |
| netware-ip | Novell NetWare over IP | 396 |
| ups | Uninterruptible Power Supply | 401 |
| smsp | Storage Management Services Protocol | 413 |
| mobileip-agent | MobileIP-Agent | 434 |
| mobilip-mn | MobilIP-MN | 435 |
| https | http protocol over TLS/SSL | 443 |
| snpp | Simple Network Paging Protocol | 444 |
| microsoft-ds | Microsoft-DS | 445 |
| appleqtc | apple quick time | 458 |
| ss7ns | ss7ns | 477 |
| ph | Ph service | 481 |
| isakmp | Isakmp | 500 |
| exec | remote process execution | 512 |
| login | remote login by Telnet | 513 |
| shell | Cmd | 514 |
| printer | Spooler | 515 |
| ntalk | Ntalk | 518 |
| utime | unixtime | 519 |
| ncp | NCP | 524 |
| timed | timedserver | 525 |
| irc-serv | IRC-SERV | 529 |
| courier | Rpc | 530 |
| conference | Chat | 531 |
| netnews | readnews | 532 |
| netwall | For emergency broadcasts | 533 |
| iiop | Iiop | 535 |
| nmsp | Networked Media Streaming Protocol | 537 |
| uucp | Uucpd | 540 |
| uucp-rlogin | uucp-rlogin | 541 |
| klogin | Klogin | 543 |
| kshell | Krcmd | 544 |
| appleqtcsrvr | appleqtcsrvr | 545 |
| dhcpv6-client | DHCPv6 Client | 546 |
| dhcpv6-server | DHCPv6 Server | 547 |
| afpovertcp | AFC over TCP | 548 |
| rtsp | Real-Time Stream Control Protocol | 554 |
| remotefs | rfs server | 556 |
| rmonitor | rmonitord | 560 |
| monitor | Monitor | 561 |
| nntps | nntp protocol over TLS/SSL (was snntp) | 563 |
| whoami | Whoami | 565 |
| sntp-heartbeat | SNTP HEARTBEAT | 580 |
| imap4-ssl | IMAP4 + SSl (use 993 instead) | 585 |
| password-chg | Password Change | 586 |
| eudora-set | Eudora Set | 592 |
| http-rpc-epmap | HTTP RPC Ep Map | 593 |
| sco-websrvrmg3 | SCO Web Server Manager 3 | 598 |
| ipcserver | SUN IPC server | 600 |
| sshell | SSLshell | 614 |
| sco-inetmgr | Internet Configuration Manager | 615 |
| sco-sysmgr | SCO System Administration Server | 616 |
| sco-dtmgr | SCO Desktop Administration Server | 617 |
| sco-websrvmgr | SCO WebServer manager | 620 |
| ldaps | ldap protocol over TLS/SSL (was sldap) | 636 |
| dhcp-failover | DHCP Failover | 647 |
| mac-srvr-admin | MacOS Server Admin | 660 |
| doom | doom Id Software | 666 |
| corba-iiop | CORBA IIOP | 683 |
| corba-iiop-ssl | CORBA IIOP SSL | 684 |
| nmap | NMAP | 689 |
| msexch-routing | MS Exchange Routing | 691 |
| ieee-mms-ssl | IEEE-MMS-SSL | 695 |
| cisco-tdp | Cisco TDP | 711 |
| flexlm | Flexible License Manager | 744 |
| kerberos-adm | Kerberos administration | 749 |
| phonebook | Phone | 767 |
| dhcp-failover2 | dhcp-failover2 | 847 |
| ftps-data | FTP protocol, data, over TLS/SSL | 989 |
| ftps | FTP protocol, control, over TLS/SSL | 990 |
| nas | Netnews Administration System | 991 |
| telnets | Telnet protocol over TLS/SSL | 992 |
| imaps | imap4 protocol over TLS/SSL | 993 |
| ircs | irc protocol over TLS/SSL | 994 |
| pop3s | pop3 protocol over TLS/SSL (was spop3) | 995 |
| sunclustermgr | SUN Cluster Manager | 1097 |
| tripwire | TRIPWIRE | 1169 |
| shockwave2 | Shockwave 2 | 1257 |
| h323hostcallsc | H323 Host Call Secure | 1300 |
| lotusnote | Lotus Notes | 1352 |
| novell-lu6.2 | Novell LU6.2 | 1416 |
| ms-sql-s | Microsoft-SQL-Server | 1434 |
| ibm-cics | IBM CICS | 1435 |
| sybase-sqlany | Sybase SQL Any | 1498 |
| shivadiscovery | Shiva | 1502 |
| wins | Microsoft's Windows Internet Name Service | 1512 |
| ingreslock | Ingres | 1524 |
| orasrv | Oracle | 1525 |
| tlisrv | Oracle | 1527 |
| coauthor | Oracle | 1529 |
| rdb-dbs-disp | Oracle Remote Data Base | 1571 |
| oraclenames | oraclenames | 1575 |
| ontime | Ontime | 1622 |
| shockwave | Shockwave | 1626 |
| oraclenet8cman | Oracle Net8 Cman | 1630 |
| cert-initiator | cert-initiator | 1639 |
| cert- responder | cert-responder | 1640 |
| kermit | Kermit | 1649 |
| groupwise | groupwise | 1677 |
| rsvp-encap-1 | RSVP-ENCAPSULATION-1 | 1698 |
| rsvp-encap-2 | RSVP-ENCAPSULATION-2 | 1699 |
| h323gatedisc | h323gatedisc | 1718 |
| h323gatestat | h323gatestat | 1719 |
| h323hostcall | h323hostcall | 1720 |
| cisco-net-mgmt | cisco-net-mgmt | 1741 |
| oracle-em1 | oracle-em1 | 1748 |
| oracle-em2 | oracle-em2 | 1754 |
| tftp- mcast | tftp-mcast | 1758 |
| www-ldap-gw | www-ldap-gw | 1760 |
| bmc-net-admin | bmc-net-admin | 1769 |
| bmc-net-svc | bmc-net-svc | 1770 |
| oracle-vp2 | Oracle-VP2 | 1808 |
| oracle-vp1 | Oracle-VP1 | 1809 |
| radius | RADIUS | 1812 |
| radius-acct | RADIUS Accounting | 1813 |
| hsrp | Hot Standby Router Protocol | 1985 |
| licensedaemon | Cisco license management | 1986 |
| tr-rsrb-p1 | Cisco RSRP Priority 1 port | 1987 |
| tr-rsrb-p2 | Cisco RSRP Priority 2 port | 1988 |
| tr-rsrb-p3 | Cisco RSRP Priority 3 port | 1989 |
| stun-p1 | Cisco STUN Priority 1 port | 1990 |
| stun-p2 | Cisco STUN Priority 2 port | 1991 |
| stun-p3 | Cisco STUN Priority 3 port | 1992 |
| snmp-tcp-port | Cisco SNMP TCP port | 1993 |
| stun-port | Cisco serial tunnel port | 1994 |
| perf-port | Cisco perf port | 1995 |
| tr-rsrb-port | Cisco Remote SRB port | 1996 |
| gdp-port | Cicso Gateway Discovery Protocol | 1997 |
| x25-svc-port | Cisco X.25 service (XOT) | 1998 |
| tcp-id-port | Cisco identification port | 1999 |
| dlsrpn | Data Link Switch Read Port Number | 2065 |
| dlswpn | Data Link Switch Write Port Number | 2067 |
| ah-esp-encap | AH and ESP Encapsulated in UDP packet | 2070 |
| h2250-annex-g | H.225.0 Annex G | 2099 |
| ms-olap3 | Microsoft OLAP | 2382 |
| ovsessionmgr | OpenView Session Mgr | 2389 |
| ms-olap1 | MS OLAP 1 | 2393 |
| ms-olap2 | MS OLAP 2 | 2394 |
| mgcp-gateway | Media Gateway Control Protocol Gateway | 2427 |
| ovwdb | OpenView NNM daemon | 2447 |
| giop | Oracle GIOP | 2481 |
| giop-ssl | Oracle GIOP SSL | 2482 |
| ttc | Oracle TTC | 2483 |
| ttc-ssl | Oracle TTC SSL | 2484 |
| citrixima | Citrix IMA | 2512 |
| citrixadmin | Citrix ADMIN | 2513 |
| call-sig-trans | H.323 Annex E call signaling transport | 2517 |
| windb | WinDb | 2522 |
| novell-zen | Novell ZEN | 2544 |
| clp | Cisco Line Protocol | 2567 |
| hl7 | HL7 | 2575 |
| citrixmaclient | Citrix MA Client | 2598 |
| sybaseanywhere | Sybase Anywhere | 2638 |
| novell-ipx-cmd | Novell IPX CMD | 2645 |
| sms-rcinfo | SMS RCINFO | 2701 |
| sms-xfer | SMS XFER | 2702 |
| sms-chat | SMS CHAT | 2703 |
| sms-remctrl | SMS REMCTRL | 2704 |
| mgcp-callagent | Media Gateway Control Protocol Call Agent | 2727 |
| dicom -iscl | DICOM ISCL | 2761 |
| dicom-tls | DICOM TLS | 2762 |
| citrix-rtmp | Citrix RTMP | 2897 |
| wap-push | WAP Push | 2948 |
| wap-pushsecure | WAP Push Secure | 2949 |
| h263-video | H.263 Video Streaming | 2979 |
| lotusmtap | Lotus Mail Tracking Agent Protocol | 3007 |
| njfss | NetWare sync services | 3092 |
| bmcpatrolagent | BMC Patrol Agent | 3181 |
| bmcpatrolrnvu | BMC Patrol Rendezvous | 3182 |
| ccmail | cc:mail/lotus | 3264 |
| msft-gc | Microsoft Global Catalog | 3268 |
| msft-gc-ssl | Microsoft Global Catalog with LDAP/SSL | 3269 |
| Unauthorized Use by SAP R/3 | Unauthorized Use by SAP R/3 | 3300 “3301 |
| mysql | MySQL | 3306 |
| ms-cluster-net | MS Cluster Net | 3343 |
| ssql | SSQL | 3352 |
| ms-wbt-server | MS WBT Server | 3389 |
| mira | Apple Remote Access Protocol | 3454 |
| prsvp | RSVP Port | 3455 |
| patrolview | Patrol View | 4097 |
| vrml-multi-use | VRML Multi-User Systems | 4200 “4299 |
| rwhois | Remote Who Is | 4321 |
| bmc-reporting | BMC Reporting | 4568 |
| sip | SIP | 5060 |
| sip-tls | SIP-TLS | 5061 |
| pcanywheredata | pcANYWHEREdata | 5631 |
| pcaywherestat | pcANYWHEREstat | 5632 |
| x11 | X Window System | 6000 “6063 |
| bmc-grx | BMC GRX | 6300 |
| bmc-perf-agent | BMC PERFORM AGENT | 6767 |
| bmc-perf-mgrd | BMC PERFORM MGRD | 6768 |
| sun-lm | SUN License Manager | 7588 |
| http-alt | HTTP Alternate (see port 80) | 8080 |
| cp-cluster | Check Point Clustering | 8116 |
| patrol | Patrol | 8160 |
| patrol-snmp | Patrol SNMP | 8161 |
| wap-wsp | WAP connectionless session service | 9200 |
| wap-wsp-wtp | WAP session service | 9201 |
| wap-wsp-s | WAP secure connectionless session service | 9202 |
| wap-wsp-wtp-s | WAP secure session service | 9203 |
| wap-vcard | WAP vCard | 9204 |
| wap-vcal | WAP vCal | 9205 |
| wap-vcard-s | WAP vCard Secure | 9206 |
| wap-vcal-s | WAP vCal Secure | 9207 |
| bmc-perf-sd | BMC-PERFORM-SERVICE DAEMON | 10128 |
| h323callsigalt | h323 Call Signal Alternate | 11720 |
| vofr-gateway | VoFR Gateway | 21590 |
| quake | quake | 26000 |
| flex-lm | FLEX LM (1 “10) | 27000 “27009 |
| traceroute | traceroute use | 33434 |
| reachout | REACHOUT | 43188 |