I am running wireshark on an iMac running El Capitan (10.11.6).
When I monitor the traffic on this machine (which is on an internal LAN IP of 10.0.100.10x) I see my IP sending SYN packets to PORT 7000 of IP address 192.168.1.4 I am then seeing lots of re-transmissions of the SYN packets because I am obviously not attached to a network in the 192.x.x.x range and never have been.
I have stopped all the running programs that OS X will let me stop, Logged in on the Mac as a new user, switched between Wired eth0 and Wireless eth1 networks. No matter what I do or change, my Mac keeps sending SYN packets to 192.168.1.4 port 7000. There are about 15 other iMacs on the same LAN and none of them are displaying the same behaviour.
Does anyone know of a way to isolate what program or service on my Mac is transmitting the packets or have an idea of what might be going on?
