# WHATPORT(524)

## NAME

port 524 — NCP (NetWare Core Protocol) — NetWare Core Protocol — a Novell NetWare or eDirectory server, or something that inherited its stack.

Protocol: TCP  
IANA registry

## DESCRIPTION

IANA registers 524 on both TCP and UDP as "ncp", the NetWare Core Protocol, which Novell used for file, print, and directory access. When NetWare moved off IPX to native IP, NCP settled on TCP 524, and the port carried forward into Novell/Micro Focus eDirectory servers where it is used for directory operations alongside LDAP. Outside of surviving eDirectory deployments you will effectively never see this on a modern scan.

## EXPOSURE

**Do not expose.** A directory and file-service control port for a legacy stack that no longer receives broad security attention — keep it on an internal segment.

## CHECK

```sh
nc -vz -w 3 TARGET 524
```

## SEE ALSO

- iana — [IANA Service Name and Transport Protocol Port Number Registry — 524](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=524) (iana.org)

---

HTML: <https://whatport.net/524/> · JSON: <https://whatport.net/524.json> · full dataset: <https://whatport.net/ports.json>