{
  "port": 524,
  "protocol": "tcp",
  "service": "NCP (NetWare Core Protocol)",
  "oneLiner": "NetWare Core Protocol — a Novell NetWare or eDirectory server, or something that inherited its stack.",
  "whatItIs": "IANA registers 524 on both TCP and UDP as \"ncp\", the NetWare Core Protocol, which Novell used for file, print, and directory access. When NetWare moved off IPX to native IP, NCP settled on TCP 524, and the port carried forward into Novell/Micro Focus eDirectory servers where it is used for directory operations alongside LDAP. Outside of surviving eDirectory deployments you will effectively never see this on a modern scan.",
  "exposure": {
    "verdict": "never",
    "note": "A directory and file-service control port for a legacy stack that no longer receives broad security attention — keep it on an internal segment."
  },
  "checkCommand": "nc -vz -w 3 TARGET 524",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 524",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=524",
      "kind": "iana"
    }
  ]
}