Port 2909: Funk Dialout — A Registered Ghost

What This Port Is

Port 2909 is officially assigned by IANA to Funk Dialout, a dial-out networking service developed by Funk Software. It operates on both TCP and UDP.

Funk Software was a Cambridge, Massachusetts company that built network access and authentication infrastructure. Their flagship product, Steel-Belted RADIUS, became a widely-used RADIUS/AAA server for managing remote user authentication — the software that decided whether your dial-up connection was allowed in.¹

Funk Dialout was the outbound companion to that infrastructure, handling the dial-out side of remote access in an era when modems were how you connected to corporate networks.

Juniper Networks acquired Funk Software in 2005 for $122 million.² The product line was absorbed. Port 2909 stayed in the registry, attributed to Cimarron Boozer, the individual who registered it with IANA.

The Registered Port Range

Port 2909 sits in the registered port range (1024–49151), also called the "user ports" range. IANA maintains assignments for these ports, but registration is voluntary and enforcement is nonexistent.

The registered range sits between:

• Well-known ports (0–1023): Tightly controlled, requiring IANA approval for major protocols like HTTP (80), HTTPS (443), and SSH (22)
• Dynamic/ephemeral ports (49152–65535): Unassigned, used temporarily by operating systems for outbound connections

A registered port assignment means someone asked IANA for the number and got it. It does not mean the software is still in use, still maintained, or that you'll ever see this port active on a modern network.

What You'll Actually Find Here

If you see traffic on port 2909 today, it is almost certainly not Funk Dialout. More likely candidates:

• A custom application that chose this port arbitrarily
• Malware using an obscure registered port to blend in
• Ephemeral traffic routed here by coincidence

No modern software actively targets this port.

How to Check What's Listening

If you see port 2909 active on a system, identify it:

On Linux/macOS:

# Show what process is listening on port 2909
sudo ss -tlnp | grep 2909

# Or with lsof
sudo lsof -i :2909

On Windows:

netstat -ano | findstr :2909

Then match the PID to a process name with Task Manager or tasklist.

Why Unassigned (and Ghost-Assigned) Ports Matter

The IANA registry has a real limitation: it only records who asked for a port, not whether the assignment is still meaningful. Funk Software's assignment here is decades old. The company is gone. But the port number is "taken" in the sense that IANA won't assign it to someone else without reviewing the history.

This matters because:

• Security tools use the IANA registry to guess whether traffic is expected or suspicious
• Firewalls are sometimes configured based on registered assignments
• Port scanners flag unrecognized traffic on registered ports as anomalous

A ghost-assigned port creates a small ambiguity: is this Funk Dialout (no, it isn't, not in 2025), or something else? The answer is almost always something else.