- Answer only the networks that need the service (no open resolvers, relays or reflectors).
- UDP services can be abused for DDoS amplification: rate-limit or block them at the edge.
- Disable legacy test services that have no use in production.
Port 5573: SAS Domain Management Messaging Protocol
Port 5573 is assigned by IANA to sdmmp (SAS Domain Management Messaging Protocol).
How sdmmp works
Network servicesThe client sends a request to port 5573 and the sdmmp service answers.
- Transport
- TCP · UDP
- Exposure risk
- not rated depends on the program listening
- Encryption
- Unknownnot stated by the registry
- IANA status
- Assigned1 registered service
- Range
- Registered (1024-49151)
- Category
- Network services
Is port 5573 dangerous?
We have no specific security note for port 5573. Its risk depends on the program actually listening on it. General advice for network services services:
IANA registry entries for port 5573
| Service | Port | Transport | Description | Reference | Updated |
|---|---|---|---|---|---|
| sdmmp | 5573 | TCP, UDP | SAS Domain Management Messaging Protocol | - | 2007-08-30 |
// source: IANA service name and port number registry
Which program uses port 5573, and is it reachable?
Linux
sudo ss -ltnup 'sport = :5573' # process listening on 5573
sudo lsof -nP -i :5573macOS
sudo lsof -nP -i :5573
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 5573 -State Listen | Select LocalAddress, OwningProcess Get-NetUDPEndpoint -LocalPort 5573 netstat -ano | findstr :5573
From another machine
nmap -p 5573 -sV <host> sudo nmap -sU -p 5573 <host> nc -zv <host> 5573
Block it in the firewall
sudo ufw deny 5573/tcp # Linux (ufw) New-NetFirewallRule -DisplayName "Block 5573" -Direction Inbound -LocalPort 5573 -Protocol TCP -Action Block # Windows
What is port 5573 used for?
Port 5573 is assigned by IANA to sdmmp (SAS Domain Management Messaging Protocol).
Is port 5573 TCP or UDP?
Port 5573 is registered for TCP and UDP.
Is it safe to open port 5573?
It depends on the program that listens on it. Open it only for a service you know and only to the networks that need it. Answer only the networks that need the service (no open resolvers, relays or reflectors).
How do I check if port 5573 is open?
On Linux run "ss -ltnup 'sport = :5573'", on macOS "lsof -nP -i :5573", and on Windows "netstat -ano | findstr :5573" to see the local process. From another machine, "nmap -p 5573 <host>" shows whether it is reachable.