Port 1667: netview-aix-7 — IBM's seventh door

Port 1667 carries netview-aix-7, one of twelve consecutive ports registered by IBM for NetView network management on AIX systems.

What NetView for AIX Is

NetView for AIX is IBM's network management software that monitors and manages networks using SNMP (Simple Network Management Protocol). It was built in the mid-1990s to manage multiprotocol networks—TCP/IP, SNA, Token-Ring, Ethernet, FDDI, NetWare, ATM—from a centralized console running on AIX, IBM's Unix operating system.¹²

The software polls network devices at intervals, collects performance data, displays network topology graphically, and lets administrators diagnose problems remotely. It's the kind of tool that kept enterprise networks running before modern cloud monitoring existed.

The Twelve-Port Sequence

IBM didn't reserve just one port for NetView. It reserved twelve:

• Ports 1661-1672: netview-aix-1 through netview-aix-12³

Port 1667 is netview-aix-7, the seventh in this sequence. Each port handles different communication channels between the NetView management console and managed systems. This multi-port architecture reflects how complex network management was in the 1990s—you needed multiple channels for different types of data and control operations.

Where Port 1667 Fits

Port 1667 sits in the registered ports range (1024-49151). This is the IANA-managed space where organizations can register ports for specific services. IBM registered these twelve ports so NetView installations worldwide would use consistent port numbers, avoiding conflicts with other software.

Unlike well-known ports (0-1023) which require root privileges to bind, registered ports can be used by normal user applications. This made sense for enterprise software like NetView that didn't need to run as root.

Why You Might See This Port

You'll encounter port 1667 if:

• Your organization still runs IBM NetView on AIX systems (common in large enterprises with legacy infrastructure)
• You're managing mainframe environments that integrate with NetView
• You're scanning a network that includes older IBM network management infrastructure

To check what's listening on port 1667:

# On Linux/Unix
sudo lsof -i :1667
sudo netstat -tulpn | grep 1667

# On Windows
netstat -ano | findstr 1667

If you see something listening on this port and you're not running NetView, investigate. It could be legitimate legacy software or something pretending to be.

Security Considerations

NetView for AIX is old software. Very old. If you're still running it:

• Ensure you're on the latest available version with security patches
• Restrict access to NetView ports using firewalls—they should only be accessible from trusted management networks
• Monitor for unauthorized access attempts
• Consider whether modern network management tools might serve you better

The ports themselves aren't inherently vulnerable, but the software using them was designed in an era with different security assumptions.

The Honest Reality

Port 1667 is a ghost from enterprise IT's past. In the 1990s, managing a network meant SNMP polling, centralized Unix consoles, and software that needed twelve consecutive ports. Today, it means APIs, cloud dashboards, and containerized monitoring agents.

But legacy infrastructure doesn't disappear just because newer tools exist. Somewhere, in data centers running systems that predate most of their administrators, port 1667 still carries NetView traffic. The mainframes endure. So do their ports.

Related Ports

The NetView family:

• Port 1661: netview-aix-1
• Port 1662: netview-aix-2
• Port 1663: netview-aix-3
• Port 1664: netview-aix-4
• Port 1665: netview-aix-5
• Port 1666: netview-aix-6
• Port 1667: netview-aix-7 (this port)
• Port 1668: netview-aix-8
• Port 1669: netview-aix-9
• Port 1670: netview-aix-10
• Port 1671: netview-aix-11
• Port 1672: netview-aix-12

Other IBM management ports:

• Port 161: SNMP (the protocol NetView uses to poll devices)
• Port 162: SNMP Trap (for devices to send alerts to NetView)