Ask Your Question
0

Basic noob question

asked 2023-07-20 19:48:28 +0000

xequence gravatar image

updated 2023-07-21 09:26:05 +0000

grahamb gravatar image

If I see a lot of black lines followed by a red line from 127.0.0.1 am I in trouble? I have a screen shot tracing loop back and I see a lot of TCP Retransmission followed up with another [RST, ACK]

  • 71 is red
  • 72-75 is yellow
  • 76 is black
  • 77 is red

Packets:

71  3.370087    127.0.0.1       127.0.0.1       TCP     44  47001 → 49678 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
72  3.400629    192.168.1.120   192.168.1.255   NBNS    100 Registration NB WORKGROUP<00>
73  3.400741    192.168.1.120   192.168.1.255   NBNS    100 Registration NB mycomputer<00>
74  3.400773    192.168.1.120   192.168.1.255   NBNS    100 Registration NB mycomputer<20>
75  3.542596    127.0.0.1       239.255.255.250 SSDP    169 M-SEARCH * HTTP/1.1
76  3.880662    127.0.0.1       127.0.0.1       TCP     56  [TCP Retransmission] 49678 → 47001 [SYN] Seq=0 Win=65535 Len=0 MSS=65495 WS=256 SACK_PERM
77  3.880680    127.0.0.1       127.0.0.1       TCP     44  47001 → 49678 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0

I am seeing what looks like another router? here? http://192.168.1.254/cgi-bin/home.ha

edit retag flag offensive close merge delete

2 Answers

Sort by » oldest newest most voted
0

answered 2023-07-21 07:06:29 +0000

hugo.vanderkooij gravatar image

I must say seeing Windows Remote Management traffic on loopback address sounds weird at best.

edit flag offensive delete link more
0

answered 2023-07-21 09:30:10 +0000

grahamb gravatar image

Doesn't seem anything to worry about, it's local traffic, something trying to connect to TCP:49678 from TCP:47001 (and failing) and some broadcasts for machine workgroup registration (mycomputer, IP 192.168.1.120) and an SSDP UPnP discovery broadcast.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2023-07-20 19:48:28 +0000

Seen: 455 times

Last updated: Jul 21 '23