Incoming connections

[johanvermeij]

I don't know if this is normal but I see many incoming connections, mainly from Google etc.

For example, why is Google making a connection from 172.194.38.129 to 192.168.2.2:4982 ?

The firewall on 192.168.2.2 is on but that is after the RV042 of course.

I am sure that there is a simple answer for this.

Apr 6 19:03:52 2012	Connection Accepted	UDP 208.67.222.222:53->192.168.2.2:64086 on eth0
Apr 6 19:03:53 2012	Connection Accepted	UDP 208.67.222.222:53->192.168.2.2:55580 on eth0
Apr 6 19:03:53 2012	Connection Accepted	TCP 173.194.38.137:80->192.168.2.2:4980 on eth0
Apr 6 19:03:53 2012	Connection Accepted	TCP 173.194.38.137:80->192.168.2.2:4980 on eth0
Apr 6 19:03:53 2012	Connection Accepted	UDP 208.67.222.222:53->192.168.2.2:57151 on eth0
Apr 6 19:03:53 2012	Connection Accepted	UDP 208.67.222.222:53->192.168.2.2:58089 on eth0
Apr 6 19:03:53 2012	Connection Accepted	TCP 173.194.38.129:80->192.168.2.2:4982 on eth0
Apr 6 19:03:53 2012	Connection Accepted	TCP 173.194.38.129:80->192.168.2.2:4982 on eth0
Apr 6 19:03:53 2012	Connection Accepted	TCP 173.194.38.129:80->192.168.2.2:4982 on eth0
Apr 6 19:03:54 2012	Connection Accepted	TCP 173.194.38.129:80->192.168.2.2:4982 on eth0
Apr 6 19:03:54 2012	Connection Accepted	TCP 173.194.38.129:80->192.168.2.2:4982 on eth0
Apr 6 19:03:54 2012	Connection Accepted	TCP 173.194.38.129:80->192.168.2.2:4982 on eth0
Apr 6 19:03:54 2012	Connection Accepted	TCP 173.194.38.129:80->192.168.2.2:4982 on eth0
Apr 6 19:04:13 2012	Connection Accepted	TCP 72.14.203.125:443->192.168.2.2:1087 on eth0
Apr 6 19:04:22 2012	Connection Accepted	TCP 157.55.130.144:40031->192.168.2.2:4700 on eth0
Apr 6 19:04:30 2012	Connection Accepted	TCP 213.146.189.206:12350->192.168.2.2:4705 on eth0

Thanks in advance

[blwright]

Johan,

Without knowing more about your network my assumption would be that a connection was made because someone from the computer at 192.168.2.2 did a google search. 173.194.38.129 is an address registered to a Google server. Why port 4982 was used is beyond me. The only thing that I can find that references the port is an IANA entry for Solar Data Log. Hope this Helps

Blake Wright

Cisco SBSC Network Engineer