Port 1649: Internet Kermit Service — The Universal Translator's Home

Port 1649 is where the Internet Kermit Service lives—a file transfer protocol that solved a problem most people have forgotten existed.

What Runs on Port 1649

The Internet Kermit Service (IKS) uses port 1649 for both TCP and UDP, though TCP is the primary protocol. It's a file transfer service built on top of Telnet for option negotiation and the Kermit protocol for actual file transfer and management.¹

Unlike FTP, which opens separate connections for control and data, IKS does everything over a single channel. One connection. One port. No negotiating secondary connections through firewalls.

The Protocol

Kermit was created in 1981 by Frank da Cruz and Bill Catchings at Columbia University.² The first file transfer happened in April 1981. The problem they were solving: Columbia students needed to save their work and move files between wildly incompatible computers—different character sets, different file systems, different operating systems, different everything.

Kermit became the universal translator. By 1988, it ran on more than 300 different computers and operating systems.² You could transfer a file from a DEC VAR to an IBM mainframe to an Apple II, and Kermit would handle all the translation.

The Internet Kermit Service, standardized in RFC 2839 in May 2000,¹ brought that capability to the Internet era. Port 1649 was officially assigned by IANA on September 27, 1995.³

How It Works

When you connect to port 1649, you're opening a Telnet session. But this isn't interactive shell access—it's a file transfer service with two possible modes:

Server-Side Kermit Server (SKS): If both client and server support the Telnet Kermit Option, the server immediately starts in Kermit server mode. Binary file transfers happen directly. No command prompt, no shell, just pure file transfer protocol.

No Kermit Server (NKS): If the client doesn't support the Kermit option, the service presents a command prompt where you can issue plain-text Kermit commands—send, receive, directory listings, file management.¹

Either way, everything happens over that single TCP connection on port 1649.

Authentication

IKS supports both authenticated and anonymous access. Authentication can happen through:

• Telnet AUTHENTICATION option
• Telnet START_TLS option (encrypted credentials)
• Plain-text userid/password verification¹

The service decides whether to allow anonymous access based on its configuration.

Why Port 1649 Matters

This port represents something rare: a protocol designed for universal compatibility. While most file transfer systems assumed similar endpoints, Kermit assumed nothing. It could negotiate any character set, any file system, any operating system quirks.

That philosophy—assume nothing, negotiate everything—is why it survived across hundreds of platforms for decades. And when the Internet needed a standard port for it, 1649 is where it landed.

Current Status

Columbia University ceased supporting the Kermit Project in 2011 and released it to open source.² Port 1649 still exists in the IANA registry. You won't find many active Kermit servers today—modern protocols like SFTP and HTTPS have taken over file transfer duties.

But the design principles survive. Single-channel operation. Universal compatibility. Careful negotiation. These ideas show up everywhere in modern protocols, even if the Kermit name has faded.

Security Considerations

Kermit predates modern security thinking. The protocol itself doesn't mandate encryption, though IKS can use START_TLS for encrypted authentication. If you find port 1649 open on a system today, treat it with caution:

• Plain-text authentication sends passwords in the clear
• No built-in encryption for file contents
• Telnet foundation inherits all of Telnet's security issues

If you need Kermit functionality today, use it over SSH or another encrypted transport, not directly on port 1649.

Checking Port 1649

To see if anything is listening on port 1649:

# Linux/Mac
sudo lsof -i :1649
netstat -an | grep 1649

# Windows
netstat -an | findstr 1649

# Test connection
telnet hostname 1649

Most modern systems won't have anything listening here. Kermit belongs to an earlier era of computing, when moving files between incompatible systems was the daily challenge.

Related Ports

• Port 23 — Telnet, the foundation IKS is built on
• Port 21 — FTP, the more common file transfer protocol (uses multiple ports)
• Port 22 — SSH, the modern secure alternative for file transfer and remote access