Port 997 sits in the well-known ports range (0-1023) with an official IANA assignment to a service called "maitrd."1 But here's the thing: almost nobody uses it, and documentation about what maitrd actually does is nearly impossible to find.
What Lives Here (Theoretically)
According to the IANA registry, port 997 is assigned to "maitrd" for both TCP and UDP protocols.2 The name suggests "maitre d'"—the person who manages restaurant seating—but what this service was supposed to manage in network terms remains unclear.
Some sources mention it may have been used by Mac OS X for RPC-based services related to NetInfo, Apple's old directory service system that was deprecated years ago.3 But concrete documentation is scarce.
The Well-Known Range
Port 997 belongs to the well-known ports range (0-1023), which is controlled by IANA. These ports are supposed to be reserved for commonly used services assigned through formal procedures.4 Getting a port in this range requires "IETF Review" or "IESG Approval"—someone went through official channels to register maitrd.
And then... apparently nobody used it.
Why This Matters
The well-known ports range is full of ghosts like this. Services that were registered decades ago, perhaps for a protocol that never caught on, or a commercial product that died, or an experimental system that stayed experimental.
Port 997 is a reminder that assignment doesn't equal adoption. Someone believed maitrd would be important enough to deserve a well-known port. The Internet disagreed.
Security Considerations
Because port 997 sees so little legitimate traffic, it's occasionally been observed in malware communications.5 Empty ports are attractive to attackers precisely because they're empty—unexpected traffic is less likely to be noticed.
If you see activity on port 997, it's worth investigating. It's probably not maitrd.
Checking What's Listening
To see if anything is actually using port 997 on your system:
Linux/Mac:
Windows:
If you find something, you've discovered either a very rare legitimate use of maitrd, or something that shouldn't be there.
The Empty Seats
Port 997 is like a restaurant that hired a maitre d' but never opened. The position exists. The name is on the door. But there are no guests to seat, and there never were.
The well-known ports range is supposed to be the Internet's prime real estate—reserved for the services everyone needs. Port 997 got a reservation and never showed up.
آیا این صفحه مفید بود؟