1. Ports
  2. Port 382

Port 382 is officially assigned to hp-managed-node, a service for HP OpenView Performance Agent. Both TCP and UDP protocols were designated for this port. The service no longer matters—HP OpenView was discontinued years ago.

What HP OpenView Did

HP OpenView was enterprise systems management software from the 1990s and 2000s. Organizations installed it to monitor servers, network devices, and applications across their infrastructure. The Performance Agent component ran on monitored machines ("managed nodes") and collected metrics: CPU usage, memory consumption, disk I/O, network traffic.

Port 382 was how those agents talked back to the central management server. Performance data flowed through this port, letting IT teams see what was happening across hundreds or thousands of machines from a single console.

The Well-Known Ports Range

Port 382 sits in the well-known ports range (0-1023), which IANA reserves for system services and widely-used protocols. Getting a well-known port assignment meant your protocol was significant enough to warrant a permanently reserved number that required root privileges to bind on Unix systems.

HP OpenView was significant in its time. Large enterprises ran it. The port assignment made sense.

Why This Port Is Obsolete

HP discontinued OpenView. The product was replaced, absorbed into other offerings, and eventually faded as cloud-based monitoring became standard. Modern performance monitoring uses different architectures: agent-less collection, cloud APIs, containerized exporters that send metrics to centralized time-series databases.

Port 382 stopped carrying traffic. The agents that used it were uninstalled. The infrastructure moved on.

What You'll Find Today

If you scan port 382 on modern networks, you'll find it closed. Occasionally you might encounter:

  • Legacy systems still running ancient HP OpenView installations
  • Misconfigurations where the port was opened years ago and never closed
  • Security scanning noise as automated tools check every port looking for vulnerabilities

You should not have port 382 open unless you're maintaining a legacy HP OpenView system (and if you are, you should probably migrate to modern monitoring).1

Checking What's Listening

On Linux or macOS:

sudo lsof -i :382
netstat -an | grep 382

On Windows:

netstat -ano | findstr :382

If something is listening, identify the process and determine if it's legitimate. Odds are it's not—this port's era has passed.

Why Obsolete Ports Matter

Port 382 is one of thousands of assigned ports in IANA's registry that no longer serve their original purpose. These ghost ports matter because:

  • They represent protocol history — Each assignment captured a moment when someone built something significant enough to need a permanent number
  • They teach about evolution — The shift from HP OpenView to modern observability platforms shows how infrastructure monitoring transformed
  • They create security surface — Abandoned services sometimes stay running, creating vulnerabilities in systems nobody remembers to patch

The Internet's port system is an archaeological record. Port 382 is a layer from the era of client-server enterprise software, before APIs and cloud infrastructure rewrote how we monitor systems.

  • Port 381: HP Performance Data Alarm Manager
  • Port 383: HP Performance Data Collector
  • Ports 381-383: All assigned to HP OpenView components, all obsolete2

Frequently Asked Questions

ئایا ئەم پەڕەیە بەسوود بوو؟

😔
🤨
😃
Port 382: HP Managed Node — A Ghost From Enterprise Monitoring Past • Connected