Koozali.org formerly Contribs.org

is this what traffic of SME behind router looks like?

is this what traffic of SME behind router looks like?
« on: June 04, 2007, 03:46:53 PM »
I recently put a 6.01 server in server only mode.
The server is 192.168.55.1.
The router in front of it is 192.168.55.88

THis is an IPTRAF snap, is this right? I do not know what port 4926 is, could not find anything on it at ianna port site either.

Also, running top, on my server I ahve many lines of User:root / command: Java

IPTraf
TCP Connections (Source Host:Port) ─ Packets ────── Bytes ─ Flags ── Iface ───┐
│┌192.168.55.88:4926                 >     123        10796   -PA-     eth0     │
│└192.168.55.1:22                    >     221        42512   -PA-     eth0     │

Offline mmccarn

  • *
  • 2,563
is this what traffic of SME behind router looks like?
« Reply #1 on: June 05, 2007, 11:56:38 PM »
This iptraf snapshot says that someone from 192.168.55.88 has an open connection to 192.168.55.1 on port 22.

Most networking programs pick a random port for the source of the connection -- but then connect to the port on which the server is listening.  So, as ssh 'listens' on port 22 - you end up with a connection from a random port to port 22 on the server...