Port 405: NCLD — The Port That Points to Nothing

Port 405 sits in the well-known ports range (0-1023), officially assigned by IANA to a service called "ncld"—short for Network Innovations CL/1.¹ That's where the story ends. No documentation survives about what this protocol actually did. No RFCs define it. No modern software uses it. It exists in the registry like a name carved into a tree that nobody remembers planting.

What Lives in the Well-Known Range

Ports 0-1023 are the well-known ports, reserved for critical Internet services.² Getting a port in this range requires IETF Review—it's the sacred namespace where SSH (22), HTTP (80), and DNS (53) live. These ports require root privileges to bind on Unix systems because they're supposed to matter.

When RFC 6335 was published, approximately 76% of the well-known ports were assigned.³ Port 405 is part of that 76%. It has an official owner. But unlike its neighbors, nobody knows what it owned.

The Ghost Protocol

IANA records show port 405 assigned to "ncld" for both TCP and UDP.⁴ The full name appears as "Network Innovations CL/1" in some registries—suggesting a connection to "connectionless" protocols, possibly related to the ISO CLNP (Connectionless Network Protocol) family that briefly competed with IP in the early 1990s.⁵

But that's speculation. The actual protocol, the company that requested it, the problem it solved—all gone. What remains is a number in a database and a name that points nowhere.

Why Unassigned Ports Matter

Port 405 isn't technically unassigned—it has an owner. But functionally, it's a reservation for a ghost. These ports matter because they represent opportunity cost. Every assigned-but-unused well-known port is a number that can't be reclaimed, can't be reassigned, can't be used for something that actually needs it.

The well-known range is finite. There are only 1,024 numbers. Port 405 occupies one of them, permanently, for a service that may never have existed at scale.

How to Check This Port

If you want to see if anything is actually listening on port 405:

# Check if port 405 is in use on your system
sudo lsof -i :405

# Or using netstat
sudo netstat -tuln | grep :405

# Scan a remote host
nmap -p 405 hostname

You'll almost certainly find nothing. Port 405 is assigned, but empty. A placeholder in the Internet's directory for a number that will never answer.

The Honest Truth

Some ports carry the weight of the Internet. Port 405 carries the weight of absence. It's a reminder that not every assignment becomes infrastructure. Sometimes a port number is just a hope that didn't materialize—a reservation for a future that never arrived.

The Internet's nervous system has thousands of these: ports assigned to protocols that died quietly, services that never launched, companies that disappeared. Port 405 is one of them. Official. Registered. Forgotten.