Port 965: Unassigned — A Ghost Port From Apple's Past

Port 965 sits in an interesting place. Officially, it's unassigned—IANA's registry shows no service registered here. But if you scanned an old Mac OS X system between the late 1990s and 2007, you might have found something listening: NetInfo.

What Range This Port Belongs To

Port 965 falls in the registered ports range (1024-49151). These ports can be registered with IANA for specific services, but registration isn't required—which is why you'll find unofficial uses scattered throughout this range.¹

Ports in this range require fewer privileges to bind to than well-known ports (0-1023), making them common choices for vendor-specific services that don't need or want official registration.

The NetInfo Connection

NetInfo was Apple's hierarchical directory service, inherited from NeXTSTEP. It stored user accounts, group information, email configurations, network filesystem mounts, printer definitions—basically all the administrative data that makes a Unix system work.²

NetInfo used RPC (Remote Procedure Call) services, and various ports in the 600-1023 range (and apparently higher, including 965) handled this traffic.³ These were never formally registered with IANA—Apple just used them.

The Timeline

• 1988: NetInfo appeared in NeXTSTEP version 0.9
• Late 1990s-2000s: Carried over to Mac OS X when Apple acquired NeXT
• 2002: Apple began replacing it with Open Directory in Mac OS X Server 10.2 Jaguar
• 2007: Completely removed in Mac OS X 10.5 Leopard⁴

If you find something on port 965 today, it's either a very old Mac that never updated, or something else entirely using an unassigned port.

Why Unassigned Ports Matter

The Internet has 65,535 ports per protocol (TCP and UDP). IANA manages assignments to prevent conflicts, but thousands of ports remain unassigned—either because no one's requested them, or because services use them informally without registration.

Unassigned doesn't mean unused. It means there's no official owner, no RFC defining behavior, no standard to point to. Sometimes this is fine—a company uses a port internally and no one cares. Sometimes it causes problems when two different services unknowingly choose the same port.

Port 965 represents the latter category: used unofficially by a major vendor for years, then abandoned when the service died. The port number remains, empty, waiting for someone else to claim it—or not.

How to Check What's Listening

On Linux or macOS:

sudo lsof -i :965

On Windows:

netstat -ano | findstr :965

If you see something here and you're not running ancient Mac OS X, investigate. It's either legacy software, or something unofficial that chose this port for its own reasons.

The Reality

Most ports are like this—no dramatic story, no world-changing protocol. Just a number in a registry, sometimes used, usually not. Port 965 had a moment in Apple's ecosystem, then faded when Open Directory took over.

The port number remains. The service doesn't.