Port 1825: DirecPC Video — A Relic of Satellite Internet's First Era

Port 1825 sits in the registered port range (1024-49151). IANA assigned it to a protocol called direcpc-video, part of Hughes Network Systems' DirecPC satellite Internet service.¹ DirecPC is gone. Port 1825 carries nothing now.

What DirecPC Was

In the mid-1990s, before broadband reached most homes, Hughes Network Systems launched DirecPC: satellite-based Internet delivered via a small dish. It was asymmetric by design. Downloads came from space at speeds that felt extraordinary for the era. Uploads still crawled through a dial-up modem.

Port 1825 was part of the video delivery infrastructure for this system. The exact protocol mechanics were never publicly documented in an RFC. Hughes built it, registered the port, deployed the service, and eventually folded DirecPC into DirecWay and then HughesNet. The port stayed in the registry when the product didn't.

What This Port Range Means

Registered ports (1024-49151) don't require root privileges to open. Unlike well-known ports (0-1023), any application can bind to them without elevated access. IANA maintains a registry of assignments, but registration is voluntary and enforcement is nonexistent. A registered port tells you what was intended, not necessarily what's running.

Port 1825 is registered but not in active use by any widely deployed software. If you see traffic on this port, it isn't DirecPC. It's something else.

What Might Be on This Port Today

Nothing standard. If a process is listening on port 1825 on your system, it's almost certainly:

• Custom application or development server
• Malware (uncommon but possible with obscure registered ports)
• A misconfigured service

How to Check What's Listening

Linux/macOS:

sudo ss -tlnp | grep 1825
# or
sudo lsof -i :1825

Windows:

netstat -ano | findstr :1825

The output will show the process ID (PID). Cross-reference with your process list to identify what's running.

Why Unassigned and Ghost Ports Matter

The port registry is a living document with fossils in it. Services die, companies dissolve, protocols are abandoned. But their port assignments don't automatically get reclaimed. Port 1825 is one of hundreds of registered ports tied to defunct services.

This matters for security. Port scanners that flag "registered service" on a port may give false confidence. The registration describes what was supposed to run there, not what's actually running. A port labeled direcpc-video carrying unknown traffic in 2025 should raise questions, not reassurances.