Topic: Port 80 ?

[guestFF]

Hi,

Does anybody know if and wich service on e-smith 4.1.2 uses port 80 to go the outside network / internet? I have a call made by something on my network to an outside internet ip adrress, port 80. I would like to know if e-smith can do this standard.

Thanks,

RequestedDeletion

[John]

Port 80 is the port that a web server listens on..... ie apache

[guestHH]

Hi John,

Thanks, I knew port 80 is where httpd is on. But it is an incomming passive port.
I' talking about a active outgoing port 80. My router is going on-line because something is calling to port 80 on an internet ip nr.

Thanks,

guestHH

[Kees Blokland]

It's not by any chance the 'send_a_status_message_home' feature ?

'Do you want to sent status messages to e-smith' or something similar..
say no.

just a thought, can't check I'm too far away form my box.

kees

[Scott Smith]

It could also be programs like the Windows Critical Update Notification feature, or Symantec LiveUpdate, etc. Quite a few "phone home" applications out there these days.

Scott

[Kees Blokland]

RequestedDeletion,

Weren't you saying in an earlier mail that you checked with ethereal and are sure there are no boxes on your internal net calling home ?

Just a thought: I was playing with ethereal on a real network the other day and forgot that Real Networks use Real Switches.. which means that you DO NOT see any traffic at all, except the stuff that goes to/from your own box. That one got me puzzled for a while... ( That's what you get when people upgrade stuff without telling you..)

kees

[guestFF]

Hello all,

Kees: No, I do not have the send-to-e-smith feature turned on.

Scott: As far as I know, nothing on our network has a phone-home feature. (I hope)
and if there were, i should see them with ethereal.

Kees:I'm a bit confused by what you mean with rela-network. You mean the streming Real Network (Audio / Video) or a real network as physical network?

I used ethereal and filtered out all traffic except traffic from and to my router (fli4l)
When it self-connects (port 1028 - 80) I see no traffic at all comming or going to my router wich can trigger the connect.

I have to test my router and e-smith with netstat

Thanks and I'll keep you posted.

Regards,

RequestedDeletion

[Kees Blokland]

Sorry for the cryptic remark: What I mean is this:

If you have a hub, than all traffic is visible to all systems plugged into the hub. Most cheaper hubs act like that, and you will see a lot of traffic between all the computers.

If you have a more expensive hub, (looks exactly the same on the outside!) it is often a switch, which is acts really like a phone exchange. It's connects computers one to one without anybody else seeing that traffic. This way, you get a very fast network. If you are sniffing with ethereal or tcpdump, to your surprise you will see no traffic.

Since switches are apearing more and more I thought I'd mention that possibility.

Of course if you are really stuck, turn the winboxes off  or on until you find the culprit. I would disconnect the e-smith box first, to make sure it's not doing things on its own, than add one at the time..

kees

[guestFF]

Hi Kees,

Ok, I understand. We have hub's and switches. You are making a good point here. I'll make sure that the essg and fli4l are on the same hub-segment together with my ethereal box. (interesting...)

Next week i will perform an extensive test and start with the router only nad then ading different kind of boxes seperately and together. I will use netstat on essg and fli4l, ethereal and ipchains. If that won't give me a clue I have to consider to get really crazy or meditate and start again....

Thanks and I'll keep you posted.

Regards,

RequestedDeletion