PathMRI

Overview/Features/Rogue ports

Rogue ports and baselines

Every listener
nobody asked for.

A list of open ports is not useful on its own — every host has some. What is useful is knowing which of them no application on that host ever needed. PathMRI knows, because it already knows what the host is supposed to run.

Triage, not a list

Scan

What is actually listening

Per host: the port, protocol, process and PID, the service behind it, the listening address and the direction — with when it was first and last seen.

Classify

Against the applications assigned

The app mapping that drives connectivity checks also says which ports are expected. A listener no assigned application accounts for stands out instead of being lost in a list.

Baseline

Approve what belongs

Learning mode turns a host's current listeners into an approved baseline in one pass, and recommends anything in use that the application library does not yet cover — with a tip on how to catalogue it.

The mapping earns its keep twice. It tells PathMRI which paths matter, and it tells it which open ports are expected. One piece of work, two answers.

Next