Port 1381: Apple Network License Manager — A ghost from Apple's enterprise past

Port 1381 carries Apple Network License Manager (ANLM) traffic on both TCP and UDP. If you've never heard of it, you're not alone. This is a service from Apple's brief foray into enterprise networking in the 1990s—a chapter most people don't remember.

What It Was

Apple Network License Manager was designed to manage software licenses across networked Macintosh systems in corporate and educational environments. During the mid-1990s, Apple sold server products like the Apple Workgroup Server and later the Apple Network Server, targeting the same enterprise market that Microsoft and Unix systems dominated.

ANLM allowed organizations to control how many users could run specific software simultaneously based on purchased licenses. Instead of installing licenses on individual machines, a central license server tracked usage across the network—the same model that companies like Autodesk and IBM used for their enterprise software.

Port 1381 was registered with IANA for this purpose, assigned to Earl Wallace at Apple.¹

Why You've Never Seen It

Apple's enterprise server ambitions didn't last. The Apple Network Server line was discontinued in 1997 after barely a year on the market. When Steve Jobs returned to Apple, he refocused the company on consumer products and killed most enterprise initiatives.

ANLM faded with them. Modern macOS systems don't include network license management—Apple moved to individual App Store licensing and device-based management instead. The infrastructure that would have used port 1381 simply doesn't exist anymore.

The Ghost Port

Port 1381 remains officially registered to Apple in IANA's database, but you're unlikely to ever see traffic on it. It's technically a registered port (in the 1024-49151 range), meaning IANA assigned it for a specific service upon Apple's request decades ago.

Most modern networks have nothing listening on port 1381. If you scan your network and find something on this port, it's either:

• An extremely old Macintosh server still running (unlikely)
• Some other service using the port unofficially (more likely)
• Something you should investigate (especially if you didn't expect it)

How to Check What's Listening

On most systems, you can check if anything is using port 1381:

# Linux/macOS
sudo lsof -i :1381
netstat -an | grep 1381

# Windows
netstat -ano | findstr 1381

If you find nothing, that's expected. This port belongs to a service that Apple built, used briefly, and abandoned when the company changed direction.

Why Unassigned Ports Matter

Port 1381 isn't technically unassigned—it's assigned to a service that's essentially extinct. But it illustrates an important reality: the port number registry is full of services that were once important and are now irrelevant.

The registered port range (1024-49151) contains thousands of assignments like this—products that failed, protocols that became obsolete, companies that no longer exist. Port 1381 is a bookmark in history, preserved in IANA's records even though the thing it was meant for is gone.

The Internet moves fast. Services rise and fall. Ports remain.

Related Ports

• Port 548 - Apple Filing Protocol (AFP), Apple's file sharing protocol (also largely replaced by SMB)
• Port 3283 - Apple Remote Desktop, still in use for Mac management
• Port 5223 - Apple Push Notification Service, critical for modern Apple devices