2 entries are registered on port 1997. It is a registered port (1024–49151) — IANA records an assignee, but nothing stops other software from listening here, which is why the number carries more than one entry.
services registered on this number
2 transports in use
entries encrypted on the wire
1 of 2 iana-registered
| port | service | proto | category | risk | views |
|---|---|---|---|---|---|
| :1997 | Chizmo Transfer Tool | TCP | File Transfer | caution | 5.3k |
| :1997 | Cisco Gateway Discovery Protocol | TCPUDP | Network Services | safe | 0 |
Port 1997 is primarily associated with the Chizmo Networks Transfer Tool, a proprietary file transfer utility used within specific private networks to facilitate data exchange. Although not widely documented or officially registered, it serves as a communication endpoint allowing the tool’s clients and servers to transfer files and possibly manage data migrations.
port 1997 as Chizmo Transfer Tool →Cisco Gateway Discovery Protocol uses TCP and UDP port 1997 for gateway discovery traffic.
port 1997 as Cisco Gateway Discovery Protocol →The registry says what 1997 is registered to. What is listening on it right now is decided by the host, and only the host can be asked. Each of these prints the process behind the socket.
ss -ltnp | grep ':1997\b'lsof -nP -iTCP:1997 -sTCP:LISTENnetstat -ano | findstr :1997On Linux and Windows the process name comes back with the socket; on macOS lsof needs sudo to name a process that isn't yours. Match what it prints against the 2 entries above.
A port number is not a service. Anything may listen on 1997 — what you actually met is decided by the host, not the registry. If a service is missing here, it belongs in the registry.
contribute an entry