HTTPfy

Port 5246 (capwap-control)

IANA assigns port 5246 to capwap-control: CAPWAP Control Protocol.

Registered (user) port, 1024-49151 UDP

Port 5246 is normally used over UDP; the checker tests TCP only, so a "filtered" result does not mean the UDP service is down.

IANA assignment

Service nameProtoDescriptionAssigneeReference
capwap-control UDP CAPWAP Control Protocol - RFC 5415

Check what is listening on port 5246

Linux: UDP 5246
sudo ss -ulnp 'sport = :5246'
Linux / macOS: which process owns the port
sudo lsof -nP -i :5246
Windows (Command Prompt)
netstat -ano | findstr :5246
Windows (PowerShell)
Get-NetUDPEndpoint -LocalPort 5246

Test it from outside

UDP probe (no reply does not prove it is closed)
nc -vzu -w 5 HOST 5246

Block port 5246 in the firewall

ufw
sudo ufw deny 5246/udp
iptables
sudo iptables -A INPUT -p udp --dport 5246 -j DROP
nftables
sudo nft add rule inet filter input udp dport 5246 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block UDP 5246' -Direction Inbound -Protocol UDP -LocalPort 5246 -Action Block

Related ports

5243xycstatus5245downtools, downtools-disc5247capwap-data5248caacws

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.