Port 3396NDPS Printer Agent
Port 3396 is primarily used by Novell Distributed Print Services (NDPS) Printer Agent. NDPS streamlines network printing management and facilitates efficient communication between client workstations, print servers, and network printers in Novell NetWare environments. Supporting both TCP and UDP, it handles job submissions, status updates, printer administration, and bidirectional status messaging for seamless network print services..
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 4/10
- lookups
- 4,603
2 transports registered
payload readable on path
registered with iana
caution
rank 954 of 993 · top 96%
Technical Details
what runs on :3396The Novell Distributed Print Services (NDPS) Printer Agent operates on port 3396, facilitating the centralized management of printers within Novell NetWare environments. NDPS Printer Agent acts as a mediator between client devices and network printers, handling print job submissions, monitoring printer status, and enabling administrative control. This bidirectional communication helps reduce complexity traditionally associated with printer configuration and setup by automating discovery and management.
NDPS integrates with Novell Directory Services (NDS), leveraging directory-based management to provide scalable control over print resources. The Printer Agent component handles spooling, queuing, and delivery of print jobs transparently to the end-user, while administrators gain the ability to manage print queues and policies centrally. Communication over this port can involve job control commands, printer status queries, and delivery confirmations.
The protocol usage on port 3396 supports both TCP and UDP to balance reliability and performance depending on the stage of the communication process. It is primarily implemented in legacy Novell environments, as modern print services have largely shifted away from this architecture. As such, it is often found in organizations maintaining backward compatibility or specialized network printing infrastructure.
Security Information
exposure of :3396risk score
4/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
network services averages 3.9 across 604 ports — this one sits 0.1 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
Common Vulnerabilities:
- NDPS Printer Agent services may lack modern authentication and encryption, making them susceptible to eavesdropping and man-in-the-middle attacks.
- Service enumeration attacks where unauthorized users can query printer statuses or job queues, potentially leaking sensitive information.
- Potential buffer overflow or denial-of-service vulnerabilities in legacy implementations.
- Exploitation of weak access controls could allow unauthorized modification of printer configurations or injection of malicious print jobs.
Common Mitigations:
- Segment network zones to restrict access to printing services only from trusted hosts.
- Employ firewalls or access control lists to limit traffic on port 3396 to known client IPs.
- Upgrade NDPS components to the latest supported versions, applying all security patches provided by Novell or Micro Focus.
- Use directory-based access controls to limit who can submit or manage print jobs.
- Where possible, replace NDPS with more secure and modern print service solutions.
- Monitor network traffic for unusual or unauthorized activity targeting port 3396.
Related Ports
the 8 most looked-up other ports in network services — 604 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted