This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Port 443 is usually the destination port if I am not mistaken, however I see it as the source port going to port 4292 and cannot figure out what could be using that.

Is it Carbonite maybe?

Thank you.

asked 09 Apr '15, 20:20

pctech's gravatar image

pctech
6112
accept rate: 0%


Port 443 is the well-known server port for SSL (encrypted) web traffic. So, when a client communicates with a server using SSL, the server will use port 443 and the client will use a dynamically selected port, such as 4292.

Port 443 will be the destination port for packets from the client and to the server, and it will be the source port for packets from the server and to the client.

GET requests from the client to the server will be from port 4292 on the client (or whatever port was dynamically selected) and to port 443 on the server. Acknowledgments from the server back to the client will be from port 443 and to port 4292.

When the server sends a web page to the client, the data packets will be from port 443 on the server and to port 4292 on the client. Acknowledgments from the client back to the server will be from port 4292 and to port 443.

permanent link

answered 09 Apr '15, 20:45

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

I.e., it's not usually the destination port; it's a destination port for a client (Web browser), but it's a source port for a server.

(10 Apr '15, 14:08) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×69
×1

question asked: 09 Apr '15, 20:20

question was seen: 8,839 times

last updated: 10 Apr '15, 14:08

p​o​w​e​r​e​d by O​S​Q​A