1. Ports
  2. Port 961

Port 961 is officially assigned in the IANA registry for NetInfo, Apple's RPC-based distributed directory service. But if you scan for it today, you'll find nothing listening. NetInfo was deprecated in Mac OS X Leopard (10.5) in 2007 and replaced by Open Directory. Port 961 is a ghost—reserved but unused, a marker of infrastructure that vanished two decades ago.

What NetInfo Was

NetInfo was a hierarchical distributed database inherited from NeXTSTEP that managed administrative data in Mac OS X through version 10.4 Tiger. It stored:

  • User and group accounts
  • Email configurations
  • Network filesystem mounts
  • Printer configurations
  • Computer and network resource information

Instead of Unix's traditional flat files (/etc/passwd, /etc/group), NetInfo provided a networked database accessible via RPC calls on port 961. Multiple Macs could share a NetInfo domain, creating a distributed directory service across a network.1

How It Worked

NetInfo used Sun RPC (Remote Procedure Call) to communicate between clients and servers. When a Mac needed to look up a user account or network configuration, it would:

  1. Connect to the NetInfo daemon (netinfod) via RPC on port 961
  2. Query the hierarchical database using a path-like syntax
  3. Receive configuration data back through the same RPC connection

This was elegant for its time—a unified directory service when most Unix systems were still editing text files by hand. But it was proprietary to Apple, didn't interoperate well with other systems, and couldn't scale to enterprise environments.

The Replacement

Apple had been moving away from NetInfo since Mac OS X 10.2 Jaguar in 2002, when they introduced Open Directory—their implementation of the standard LDAP protocol. With each release, NetInfo's role shrank. By Tiger (10.4), it only managed local users.

Then came Leopard (10.5) in 2007. NetInfo disappeared completely. The replacement:2

  • Open Directory for network directory services (LDAP-based, standards-compliant)
  • Directory Services local node (dslocal) for local accounts, stored as XML property lists in /var/db/dslocal/

Port 961 went silent. The RPC daemon stopped running. The database format was abandoned. Any Mac running 10.5 or later (which is every Mac from the last 18 years) has never opened port 961.

Why This Port Still Exists

The IANA registry lists port 961 as assigned to Apple for NetInfo.3 It's not marked as deprecated or unassigned. It's just... there. A reserved address that nothing uses anymore.

This is common in the port registry. Services get replaced, protocols evolve, companies change direction—but the port assignments remain. It's easier to leave them registered than to reclaim them. And who knows? Maybe some ancient Mac OS X 10.4 server is still running somewhere in a closet, still making NetInfo RPC calls on port 961, unaware that the rest of the world moved on in 2007.

The NeXT Legacy

Port 961 is a small piece of NeXT's DNA still visible in modern macOS. Steve Jobs brought NeXTSTEP to Apple in 1997, and it became the foundation for Mac OS X. NetInfo came along for the ride—a sophisticated distributed directory system from an era when most personal computers didn't even think about network-wide user databases.

It served its purpose for the early years of Mac OS X, then gracefully retired when better standards-based alternatives matured. Port 961 is its memorial.

Security Considerations

If you somehow find port 961 open on a modern system, you've discovered either:

  • An extremely old Mac running Mac OS X 10.4 Tiger or earlier (released in 2005 or before)
  • Someone running legacy software that shouldn't be on a network
  • A misconfigured service pretending to be NetInfo

NetInfo was designed in an era with different security assumptions. It had basic authentication but wasn't built for hostile networks. If you're running a system old enough to use NetInfo, you have much bigger security problems than the port it listens on.

How to Check What's Listening on Port 961

On Unix-like systems (macOS, Linux):

lsof -i :961

Or using netstat:

netstat -an | grep 961

On any modern Mac (10.5+), you'll find nothing. The port is silent.

  • Port 111 — Portmapper/rpcbind, the RPC service that mapped RPC program numbers to ports like 961
  • Port 389 — LDAP, the standard directory protocol that replaced NetInfo
  • Port 625-640 — Other RPC-based services in the same era

Why Unassigned and Deprecated Ports Matter

Port 961 isn't technically unassigned—it's assigned but obsolete. This distinction matters for the port system:

  • Registry completeness — Keeping historical assignments prevents future conflicts
  • Archaeological value — Understanding what ports carried helps trace Internet history
  • Scanning context — If you find port 961 open during a security scan, you know you've found something old and possibly vulnerable

The Internet doesn't forget easily. Even when the services die, the port numbers remain—markers of technologies that once seemed essential, now just entries in a registry, waiting for nothing.

Frequently Asked Questions

ڇا هي صفحو مددگار هو؟

😔
🤨
😃