What are Ports 381-383?
by Colin Cohen | Published on June 13, 2024
![Port 381-383](https://images.ctfassets.net/aoyx73g9h2pg/1SfKy3TSm3T4ZQY5YwaRmp/7ca82211f2d032b4b6ae8e2b1b0d9ca7/Port_381-383.png)
Ports 381 through 383 are dedicated to HP OpenView, a discontinued family of products that consisted of network and systems management tools for the purpose of performance data services.
Port 381 through 383 were used for various services relating to collecting network performance data in HP OpenView, which was a set of network and systems management products for large enterprises. The services supported both TCP and UDP transport protocols.
What is Port 381 Used for?
Port 381 was used for the HP Performance Data Collector service, which OpenView implemented on management servers to collect data from managed nodes. The service supported both TCP and UDP transport protocols, the latter of which was used for network monitoring and discovery functions such as SNMP trap receptions and ICMP pings.
What is Port 382 Used for?
Port 382 was used for the HP OpenView Performance Agent service. The service was installed on managed nodes and was for sending performance data to management servers. Like with the Performance Data Collector service, the service supported both TCP and UDP transport protocols.
What is Port 383 Used for?
Port 383 was used for the HP Performance Data Alarm Manager service, which managed alarms relating to performance data. It supported both TCP and UDP transport protocols.
Security Considerations for Ports 381-383
Leaving ports 381 through 383 open on your devices can expose them to a number of vulnerabilities, in particular, arbitrary file deletion exploits on port 383. However, as HP OpenView is a long-discontinued family of products, there is likely no good reason to have the ports open.
Managing Ports 381-383
In most cases, you should close ports 381 through 383 in your firewall.
To close each port in Windows, do the following (replacing [port] with each port number):
Open the Firewall Control Panel by running firewall.cpl in a command prompt.
Select Advanced Settings and click Inbound Rules.
Click New Rule under Action.
Select TCP and Specific local ports, and enter [port].
Under Action, select Block the connection and click Next.
Under Profile, select Domain and Private and click Next.
Under Name, enter a name for the rule and click Finish.
Repeat steps 2 through 7 for Outbound Rules.
Frequently Asked Questions
The following FAQs answer questions typically asked relating to port 381 through 383. They provide a basic understanding of the ports and their uses.
What is HP OpenView Used for?
HP OpenView was used to manage an organization’s IT infrastructure and provide systems and network management on a large scale. It has long been discontinued.
What Replaced HP OpenView?
HP OpenView went through a series of rebrandings before it was sold and discontinued. There are a number of alternatives to it available today, such as products from SolarWinds, Cisco and Juniper.
Is HP OpenView Still Used?
HP OpenView is no longer used. Because of this, there is likely no reason to keep ports 381 through 383 open on your devices.
Is Port 383 UDP or TCP?
Port 383 supported both TCP and UDP transport protocols. It used the latter protocol for services that didn’t require establishing a connection.
Conclusion
Ports 381 through 383 were used by HP OpenView, which was a set of products that have been long discontinued. The ports supported both the TCP and UDP transport protocols. As OpenView is no longer used, you probably should close the ports on your devices.