Port 9875Session Announcement Protocol v1

Distributes multicast session announcements, commonly carrying SDP descriptions for streaming media.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
2/10

safe

lookups
0

rank 994 of 3,396 · top 29%

also known as sapv1, SAP

1 other service is registered on port 9875. compare all 2

Technical Details

what runs on :9875

SAP sends periodic announcement datagrams, normally to a multicast SAP address, with no connection setup or request/response handshake. A versioned header identifies the message, source, message ID, optional authentication, encryption, or compression, followed by a payload commonly containing an SDP session description; an empty or deletion announcement can withdraw a session. The IANA assignment lists TCP and UDP port 9875, but SAP deployments generally use UDP 9875.

Security Information

exposure of :9875

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

streaming averages 3.2 across 41 ports — this one sits 1.2 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

SAP announcements are not encrypted by default and can be spoofed or modified by an attacker able to inject traffic into the announcement scope, potentially directing receivers to malicious or unwanted streams. It should generally remain limited to the intended multicast domain rather than be exposed to the public internet; implementations should also validate and safely parse announcement payloads.

the 8 most looked-up other ports in streaming — 41 ports carry that label.

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted