Ask Your Question
0

Basic noob question

asked 2023-07-20 19:48:28 +0000

xequence gravatar image

updated 2023-07-21 09:26:05 +0000

grahamb gravatar image

If I see a lot of black lines followed by a red line from 127.0.0.1 am I in trouble? I have a screen shot tracing loop back and I see a lot of TCP Retransmission followed up with another [RST, ACK]

  • 71 is red
  • 72-75 is yellow
  • 76 is black
  • 77 is red

Packets:

71  3.370087    127.0.0.1       127.0.0.1       TCP     44  47001 → 49678 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
72  3.400629    192.168.1.120   192.168.1.255   NBNS    100 Registration NB WORKGROUP<00>
73  3.400741    192.168.1.120   192.168.1.255   NBNS    100 Registration NB mycomputer<00>
74  3.400773    192.168.1.120   192.168.1.255   NBNS    100 Registration NB mycomputer<20>
75  3.542596    127.0.0.1       239.255.255.250 SSDP    169 M-SEARCH * HTTP/1.1
76  3.880662    127.0.0.1       127.0.0.1       TCP     56  [TCP Retransmission] 49678 → 47001 [SYN] Seq=0 Win=65535 Len=0 MSS=65495 WS=256 SACK_PERM
77  3.880680    127.0.0.1       127.0.0.1       TCP     44  47001 → 49678 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0

I am seeing what looks like another router? here? http://192.168.1.254/cgi-bin/home.ha

edit retag flag offensive close merge delete

2 Answers

Sort by » oldest newest most voted
0

answered 2023-07-21 09:30:10 +0000

grahamb gravatar image

Doesn't seem anything to worry about, it's local traffic, something trying to connect to TCP:49678 from TCP:47001 (and failing) and some broadcasts for machine workgroup registration (mycomputer, IP 192.168.1.120) and an SSDP UPnP discovery broadcast.

edit flag offensive delete link more
0

answered 2023-07-21 07:06:29 +0000

hugo.vanderkooij gravatar image

I must say seeing Windows Remote Management traffic on loopback address sounds weird at best.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2023-07-20 19:48:28 +0000

Seen: 550 times

Last updated: Jul 21 '23