Port 1984: Big Brother — The port named after a novel

What Port 1984 Is

Port 1984 sits in the registered port range (1024–49151). These ports are available for use by applications and services, registered with IANA when developers want their software to have a recognized home. Port 1984 has no official IANA assignment — but it has a well-known unofficial occupant.

Big Brother, the Monitoring Tool

In the mid-1990s, a network monitoring tool called Big Brother arrived. The name was intentional: the software watched your servers the way Orwell's Big Brother watched citizens. It collected status reports from machines across a network, aggregated them on a central server, and presented a dashboard showing what was up, what was down, and what was struggling.

The port choice was the joke made whole. Big Brother communicates on TCP port 1984.¹

The design was elegant in its simplicity. Monitored systems sent plain-text status messages to the central server every five minutes. The server displayed colored status indicators — green, yellow, red — on a web page that administrators could check at a glance. No complex protocols. No heavyweight agents. Just machines regularly reporting in to their watcher.

The Line of Succession

Big Brother has largely been superseded, but port 1984 lived on through its descendants:

• bbgen — an open-source add-on to Big Brother, released in 2002
• Hobbit — bbgen version 4.0 (2005), decoupled from Big Brother entirely
• Xymon — Hobbit renamed in 2008 after a trademark conflict²

Xymon, the current active project, still uses port 1984 for communication between server and clients. Backward compatibility demands it. So Orwell's reference, embedded in a 1990s port choice, continues running on production infrastructure today.

Checking What's on This Port

If port 1984 shows activity on your system and you're not running Big Brother or Xymon, something else is using it — the port is unassigned and fair game for any application.

To check what's listening:

Linux/macOS:

ss -tlnp | grep 1984
# or
lsof -i :1984

Windows:

netstat -ano | findstr :1984

The process ID from these commands will tell you what's actually there.

Why Unassigned Ports Matter

The registered port range is where the Internet's middle tier lives — not the famous well-known ports below 1024, not the ephemeral throwaway ports above 49151. When an application wants a stable, recognizable home, it registers here.

But registration is voluntary. Port 1984 proves that a port can have a real identity without formal IANA blessing — just history, widespread use, and a good joke.