Port 60598: Xsan Filesystem Access — Apple's Shared Storage Protocol

What This Port Does

Port 60598 carries Xsan Filesystem Access traffic. ¹ Xsan is Apple's storage area network (SAN) solution—a clustered filesystem that allows multiple Mac systems to mount and access the same shared storage volumes simultaneously, reading and writing files without stepping on each other's toes. ²

This is the opposite of your laptop's local filesystem. It's not "files on my machine"—it's "files we all share."

The Problem It Solves

In media production, scientific computing, and enterprise environments, you need multiple systems to work with the same dataset simultaneously. A video editing suite with four Macs needs them all reading frames from the same storage pool. A rendering farm needs dozens of machines writing results to shared disk. Local storage doesn't work here.

Xsan solved this by building a clustered filesystem on top of Fibre Channel—a high-speed storage network. Port 60598 is one of the ports Xsan clients use to talk to the metadata controller (the brain of the filesystem) and coordinate access to blocks of data. ³

The Technical Reality

Xsan is based on Quantum's StorNext filesystem, which Apple licensed and adapted for Mac. ⁴ When Apple shipped it in 2005, it was a complete datacenter stack—metadata controller, client software, monitoring tools, everything. For organizations running thousands of dollars in storage, this was less exotic than it sounds.

Here's what matters: Xsan uses a range of ports in the ephemeral range (49152–65535) for client connections. ³ Port 60598 doesn't get assigned to one specific connection—many Xsan clients might use it simultaneously, each running on a different system accessing the shared filesystem. The port becomes a kind of meeting point where coordination happens.

Why You Might See This

If port 60598 is listening on your Mac, it means:

• Xsan software is installed
• Your system is (or was) connected to a Xsan storage fabric
• The system believes it needs to coordinate with other systems sharing storage

In modern macOS, Xsan is rare. Apple discontinued it as a standalone product years ago. But it still exists in legacy environments where it works fine and the cost of migrating off it is higher than the cost of maintaining it.

How to Check What's Listening

# macOS / Linux
lsof -i :60598

# Linux
ss -tlnp | grep 60598
netstat -tlnp | grep 60598

# Check if Xsan is installed
mdls /Library/Xsan  # macOS

If nothing is listening on 60598, it's probably just reserved in the ephemeral range—waiting to be used.

Why Unassigned and Assigned Ports Both Matter

Port 60598 exists at an interesting boundary. It's assigned a service name (Xsan Filesystem Access), but it lives in the dynamic port range (49152–65535). ¹ This range was originally meant for temporary, client-side connections that the OS assigns on the fly.

But applications like Xsan claimed specific ports within that range for their own purposes. This works because dynamic ports are large enough that collision is rare—there are 16,384 ports in the range. You get enough space for specialization while still having room for temporary connections.

It's a pragmatic solution: protocols can claim specific ports for their needs while the operating system still has thousands of ephemeral ports available for short-lived connections.

The Honest Truth

Xsan was ambitious—Apple's attempt to build a complete enterprise storage solution for Mac environments. It worked well for the organizations that adopted it. But datacenter infrastructure tends to consolidate around a few dominant players. Xsan faded as Linux and Windows storage networks became the standard.

Today, seeing port 60598 listening is usually a sign you're in a legacy environment that works fine and hasn't been upgraded—which, for storage systems, is often the right call. When the metadata controller is stable and the storage is fast, replacing it is costly and risky.

The port carries less traffic now than it did in 2007. But somewhere, on some Mac in some editing bay or render farm, it's probably still coordinating access to files that matter very much to someone.