Koozali.org: home of the SME Server

is this what traffic of SME behind router looks like?

Offline dilligaf

  • *
  • 266
  • +0/-0
    • http://www.willcraft.com
is this what traffic of SME behind router looks like?
« on: June 04, 2007, 03:46:53 PM »
I recently put a 6.01 server in server only mode.
The server is 192.168.55.1.
The router in front of it is 192.168.55.88

THis is an IPTRAF snap, is this right? I do not know what port 4926 is, could not find anything on it at ianna port site either.

Also, running top, on my server I ahve many lines of User:root / command: Java

IPTraf
TCP Connections (Source Host:Port) ─ Packets ────── Bytes ─ Flags ── Iface ───┐
│┌192.168.55.88:4926                 >     123        10796   -PA-     eth0     │
│└192.168.55.1:22                    >     221        42512   -PA-     eth0     │

Offline mmccarn

  • *
  • 2,626
  • +10/-0
is this what traffic of SME behind router looks like?
« Reply #1 on: June 05, 2007, 11:56:38 PM »
This iptraf snapshot says that someone from 192.168.55.88 has an open connection to 192.168.55.1 on port 22.

Most networking programs pick a random port for the source of the connection -- but then connect to the port on which the server is listening.  So, as ssh 'listens' on port 22 - you end up with a connection from a random port to port 22 on the server...