I am learning computer networking. When I started using Wireshark to capture packets on my wireless card, I noticed the following entries: What do the above entries resemble? asked 21 Apr '12, 18:33  Tech2010 edited 21 Apr '12, 23:34  grahamb ♦ |
One Answer:
This is port 5000. You have transport name resolution turned on, so Wireshark is displaying a service name instead of port number. For example "http" instead of "80", or in this case "commplex-main" instead of "5000". The port-number-to-service-name mappings are found in Wireshark's services file. I did some Googling, but was unable to find out exactly what commplex-main is. However, there are actually multiple services that commonly run over port 5000. "commplex-main" is the service name associated with port 5000 in the services file, but this traffic could be some other service; all this tells you is that it's running on port 5000. If this is a Windows computer, the traffic is more likely to be UPnP. answered 21 Apr '12, 20:42  Jim Aragon |
