[947] in resnet
Re: new port traffic
daemon@ATHENA.MIT.EDU (George Russ)
Wed Mar 6 08:25:34 2002
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Message-ID: <NDBBIHDGFCPMFIDNCBCIOEJJGIAA.george.russ@citadel.edu>
Date: Wed, 6 Mar 2002 08:17:58 -0500
Reply-To: george.russ@citadel.edu
From: George Russ <george.russ@citadel.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <78E14EC993154B4AA6D771902D2CAAAA374B94@exchange.RADFORD.EDU>
Set the class for viewing talker or listener (depending on if it's inbound
or outbound)and then you can see where the data is going(what ip). This will
lead you to the culprit and use.
george
the citadel
>-----Original Message-----
>From: Resnet Forum [mailto:RESNET-L@listserv.nd.edu]On Behalf Of Joyce,
>Todd N
>Sent: Tuesday, March 05, 2002 10:21 AM
>To: RESNET-L@listserv.nd.edu
>Subject: Re: new port traffic
>
>
>It was pulling 5 Megs of data this morning at 7:30AM EST from the
>residence halls. That is why I am trying to figure out what it is.
>Thank goodness for the Packeteer. I stuck in my P2P folder to limit it
>until I can find out what it is.
>
>todd
>
>Todd Joyce
>Network Services
>Radford University
>tjoyce@radford.edu
>(540) 831-7777
>
>-----Original Message-----
>From: Jeremy Mlazovsky [mailto:Jeremy.Mlazovsky@NOTES.UDAYTON.EDU]
>Sent: Tuesday, March 05, 2002 9:09 AM
>To: RESNET-L@listserv.nd.edu
>Subject: Re: new port traffic
>
>Check that ...
>
>Found it. Looks like it is used for SSL connections with Apache, maybe?
>
>http://www.geocrawler.com/archives/3/188/2000/8/0/4159917/
>Excerpt ...
>
> If you set up an Apache virtual host to server content over SSL
> on port 10443, and then make a request to a servlet mounted on that
> virtual host, then HttpServletRequest.getScheme() will return the
>string
> `http`.
>
>
>
>
>Another page has this:
>http://www.phpbuilder.com/mail/php-general/2001042/1801.php
>Excerpt ...
>
> - setup stunnel (www.stunnel.org)
>to
> listen to port 10443 in the
> 127.0.0.1 interface and forward
>that
> to www.myprovider.com
> - the php script would connect to
> 127.0.0.1:10443 using plain text
> - that's it, easy and clean! :)
>
>
> stunnel will hapilly forward the
> 127.0.0.1:10443 to the destination
> encripted and you will have to
>deal
> with the easy part of it! ;)
>
>
>
>Jeremy Mlazovsky
>PC/Network Specialist
>UD IT
>University of Dayton
>Office: 937-229-4019
>
>
>
> "Joyce, Todd N"
> <tjoyce@RADFORD. To:
>RESNET-L@listserv.nd.edu
> EDU> cc:
> Sent by: Resnet Subject: new port traffic
> Forum
> <RESNET-L@listse
> rv.nd.edu>
>
>
> 03/05/2002 08:44
> AM
> Please respond
> to Resnet Forum
>
>
>
>
>
>
>Has anyone figured out or seen what is running on TCP Port 10443?
>Goggle search turned up nothing.
>
>thanks
>
>Todd Joyce
>Network Services
>Radford University
>tjoyce@radford.edu
>(540) 831-7777
>
>___________________________________________________
>You are subscribed to the ResNet-L mailing list.
>
>To subscribe, unsubscribe or search the archives,
>go to http://LISTSERV.ND.EDU/archives/resnet-l.html
>___________________________________________________
>
>___________________________________________________
>You are subscribed to the ResNet-L mailing list.
>
>To subscribe, unsubscribe or search the archives,
>go to http://LISTSERV.ND.EDU/archives/resnet-l.html
>___________________________________________________
>
>___________________________________________________
>You are subscribed to the ResNet-L mailing list.
>
>To subscribe, unsubscribe or search the archives,
>go to http://LISTSERV.ND.EDU/archives/resnet-l.html
>___________________________________________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
