This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am trying to test my friends proxy to make sure his IP cant be pulled, and the IP 74.38.140.80 keeps popping up with the destination port cc-tracking. Every other skype IP gives a 5 digit destination port, but this IP and port just lurk around and dont belong to anyone that I know of. Anyone know what the destination port means, or why even with my skype filter on it is getting through everytime? PLZ HELP!! :D Much thanks

asked 09 Feb '14, 02:14

Skratch's gravatar image

Skratch
1222
accept rate: 0%

edited 09 Feb '14, 02:47

grahamb's gravatar image

grahamb ♦
19.8k330206


A lot of tcp and udp ports are "allocated" for specific applications by IANA, so Wireshark will show the application that is "allocated" for that port. In your case, cc-tracking is registered for tcp and udp port 4870.

Note that just because a port is "allocated" for an application doesn't mean all traffic using that port is the registered application, other applications are free to use the port if they wish on the understanding that they may encounter difficulties if the registered application is actually running.

permanent link

answered 09 Feb '14, 02:57

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Ok that helps a little bit, its just weird that it popped up randomly today, everytime I have used Wireshark in the past month this IP and Port has never appeared. And all of a sudden it is popping up everytime I start the program, and it doesn't belong to anybody in the skype call. Just not sure where it is coming from, or if something changed to make it appear, such as a program I might have running that is causing it to show up. Your thoughts? (not crazy tech savy, so the simpler the terms the better!)

(09 Feb '14, 03:02) Skratch

If the IP address is one used by your machine then I would agree that it's down to a process running on your machine. You don't say what OS you're running, but using command line programs such as netstat can show what processes are using a port.

(09 Feb '14, 08:04) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×11

question asked: 09 Feb '14, 02:14

question was seen: 1,294 times

last updated: 09 Feb '14, 08:04

p​o​w​e​r​e​d by O​S​Q​A