Port 10115: NetIQ Endpoint — Application Performance Test Initialization

What This Port Does

Port 10115 is assigned to NetIQ Endpoint (netiq-endpt), a component of NetIQ's application performance monitoring and management infrastructure. When NetIQ performance tests initialize—before the actual load test begins—port 10115 is where the control plane reaches out to its distributed test endpoints to synchronize and coordinate. ¹

The port is used for TCP/UDP communication with performance endpoint agents running on Windows, Linux, HP-UX, and AIX systems. Once a test starts running, other ephemeral ports carry the actual test traffic. Port 10115 handles the handshake.

The Register Range It Belongs To

Port 10115 falls in the Registered Ports range (1024-49151). This range is managed by IANA. Anyone can apply to register a port number here for a specific service they're creating. Unlike the Well-Known Ports (0-1023), which are reserved for Internet standards, registered ports belong to whoever files the paperwork with IANA and documents their service. NetIQ filed for 10115 and got it.

That means on the broader Internet, port 10115 is supposed to mean one thing: NetIQ Endpoint. But the registered range is also where most real applications live. It's crowded and flexible by design.

Who Actually Uses This Port

NetIQ is now owned by OpenText and used by enterprises running application performance monitoring. If you're in a large organization using NetIQ AppManager or NetIQ Vivinet Assessor, your infrastructure probably has this port open somewhere. If you're not, you'll never see it.

The port serves:

• Performance test initialization handshakes
• Endpoint agent registration and health checks
• Test orchestration commands sent to distributed agents

How to Check What's Listening

If you suspect NetIQ is running on your system:

# On Linux/macOS
lsof -i :10115

# On Windows (PowerShell as admin)
netstat -ano | findstr :10115

# Generic port check (any platform)
curl -v telnet://127.0.0.1:10115

A NetIQ endpoint listening on 10115 won't respond to HTTP requests—it expects NetIQ's proprietary protocol. A successful telnet connection that then hangs is what you're looking for.

Why This Port Matters (Even Though It's Quiet)

Port 10115 represents something real about how the Internet works: most ports carry specialized traffic for specific enterprise software. The visible ones—22, 443, 80—are the superstars. But the Internet's infrastructure also depends on hundreds of registered ports doing unglamorous work: monitoring, orchestration, status checks, and initialization handshakes.

For IT operations teams using NetIQ, port 10115 is essential. For everyone else, it's invisible. That's fine. It's designed to be.

Related Ports

• Port 10109 — NetIQ Qman Agent
• Port 10110 — NetIQ Qman Service
• Port 443 (HTTPS) — Where modern endpoint management is moving (NetIQ also supports REST APIs over HTTPS)