Koozali.org: home of the SME Server

Obsolete Releases => SME Server 6.x => Topic started by: dilligaf on June 04, 2007, 03:46:53 PM

Title: is this what traffic of SME behind router looks like?
Post by: dilligaf on June 04, 2007, 03:46:53 PM

I recently put a 6.01 server in server only mode.
The server is 192.168.55.1.
The router in front of it is 192.168.55.88

THis is an IPTRAF snap, is this right? I do not know what port 4926 is, could not find anything on it at ianna port site either.

Also, running top, on my server I ahve many lines of User:root / command: Java

IPTraf
TCP Connections (Source Host:Port) ─ Packets ────── Bytes ─ Flags ── Iface ───┐
│┌192.168.55.88:4926                 >     123        10796   -PA-     eth0     │
│└192.168.55.1:22                    >     221        42512   -PA-     eth0     │

Title: is this what traffic of SME behind router looks like?
Post by: mmccarn on June 05, 2007, 11:56:38 PM

This iptraf snapshot says that someone from 192.168.55.88 has an open connection to 192.168.55.1 on port 22.

Most networking programs pick a random port for the source of the connection -- but then connect to the port on which the server is listening.  So, as ssh 'listens' on port 22 - you end up with a connection from a random port to port 22 on the server...