Port 876: A Ghost in Apple's Networking Past

Port 876 sits in the well-known port range (0-1023), assigned by IANA for specific services. But the service it was built for barely exists anymore.

What Ran Here

Port 876 was designated for Mac OS X RPC-based services, particularly NetInfo¹—Apple's directory service system used in older versions of macOS for managing system information and network configurations.

NetInfo handled things like user accounts, groups, hostnames, and network settings across Mac networks. It used RPC (Remote Procedure Call) to communicate between systems, and port 876 (along with other ports in the 600-1023 range) was part of that infrastructure.

What Happened to NetInfo

Apple deprecated NetInfo in favor of Open Directory, which uses different protocols and ports. Modern macOS systems don't use NetInfo. If you're running a current version of macOS, port 876 is likely doing nothing.

This is what happens to ports when the services they were built for get replaced. The port number remains in the registry, but the protocol moved on.

The Well-Known Range

Port 876 falls within the well-known ports (0-1023), which require root/administrator privileges to bind to. This range is controlled by IANA and reserved for system-level services that the Internet depends on—or in this case, services that systems used to depend on.

Being in this range means:

• Only privileged processes can listen on port 876
• It's part of the foundational Internet infrastructure (even if unused)
• It won't be reassigned to something else

Checking What's Listening

If you want to see if anything is actually using port 876 on your system:

On Linux/macOS:

sudo lsof -i :876
# or
sudo netstat -tlnp | grep :876

On Windows:

netstat -ano | findstr :876

Most likely, you'll find nothing. Port 876 exists, but it's probably empty.

Why Ghost Ports Matter

The Internet is full of ports like this—numbers that once carried important traffic but now sit idle because the protocols they served have been replaced. Port 876 is a marker of networking history. It tells the story of how Apple built and then abandoned an entire directory service architecture.

These ports don't get deleted. They just become quiet. And that's fine. The Internet has 65,535 ports per protocol. There's room for ghosts.