First off, thanks to everyone for your help. I was able to discover what process was listening on tcp port 3017 by using the TDImon utility as suggested by many people.
It turns out it is related to Novell. It's installed as part of the Novell client, and it's used by NDPS for network printing. The process itself is called dpmw32. Thanks again everyone, Steve Bremer
