Editing 430.ch Reconnaissance Report (section)

=== Port 5355 on <code>ov.430.ch</code> ===

Full TCP scan found:

<pre>
5355/tcp open llmnr
</pre>

This appeared on both IPv4 and IPv6 for the <code>ov.430.ch</code> host.

Targeted UDP checks returned:

<pre>
5355/udp open|filtered llmnr
</pre>

The version probes against TCP 5355 ran longer than useful and were stopped. No additional service fingerprint was collected.

Interpretation:

* Port 5355 is normally Link-Local Multicast Name Resolution (LLMNR).
* LLMNR is not normally useful on the public Internet.
* If this is truly LLMNR, it should not be exposed externally.
* If it is another custom service on port 5355, it should be documented and access-controlled.