What's that traffic? Great port-range.

Discussion in 'Tomato Firmware' started by nibbs, Jun 4, 2007.

  1. nibbs

    nibbs LI Guru Member


    I'm using Tomato 1.07 and playing around with it. ATM the QoS feature is dragging my attention and while I was clicking thru the sub-categories of it, I found the following under "View Details" (cutout):

    Proto	Source		S Port	Destination		D Port	Class
    TCP	3119	unknown (	443	Unclassified
    TCP	3116	unknown (	443	Unclassified
    TCP	3115	unknown (	443	Unclassified
    TCP	3114	unknown (	443	Unclassified
    TCP	3113	unknown (	443	Unclassified
    TCP	3112	unknown (	443	Unclassified
    TCP	3111	unknown (	443	Unclassified
    As I am a noob, I just can't judge it and checked netstat -a which gave me the following result:
    Proto  Lokale Adresse         Remoteadresse          Status
    TCP    peter:1316             localhost:1315         HERGESTELLT
    TCP    peter:1317             localhost:1318         HERGESTELLT
    TCP    peter:1318             localhost:1317         HERGESTELLT
    TCP    peter:1319             localhost:1320         HERGESTELLT
    TCP    peter:1320             localhost:1319         HERGESTELLT
    TCP    peter:1322             localhost:1323         HERGESTELLT
    TCP    peter:1323             localhost:1322         HERGESTELLT
    Do I have to worry of maybe having a security issue here? Any help much appreciated.
    All other behaviour of my PC is inconspicuous. No unexpected traffic, lag or anything.
  2. mraneri

    mraneri Network Guru Member

    Nope, these are connections from your computer to the router. These connections are normal, and there are a significant number, I suspect because you are loading that web page at that time.

    You can hide these connections by going to:
    Administration -> Debugging
    and checking "Avoid displaying LAN to router connections".

    I see the same behavior when this is unchecked, and I know nothing bad is going on in my system.

    - Mike
  3. affer

    affer LI Guru Member

    It doesn't look like anything worrysome because those connects only show up when you are using the GUI router login. It's probably traffic updating the GUI, SVG graphics, etc.
  4. nibbs

    nibbs LI Guru Member

    Ah, that I didn't think of that myself... :)
    Thank you very much.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice