High traffic on port 3867 even when blocked

I'm seeing high traffic on port 3867 on the network dashboard. It's the second highest used port after 8080. I even tried blocking (and logging) that port and I'm still seeing high traffic (but nothing in the logs) so I'm assuming it's something originating in the ASG. I'm not seeing any traffic on port 3867 on the packet filter logs. Does anyone know what this is?

Also I'm seeing a good bit of traffic on port 80 even though I have that blocked. But there is a lot of client activity on port 80 that's getting stopped at the packet filter. Is that still counted as "traffic"? I would have though they only count packets that make it all the way through.

0 RFCat_vk_01 over 16 years ago

Hi Greg,
everything that hits the ASG is counted as traffic. You will note that the traffic is counted twice in some circumstances, incoming and outgoing. Only the blocked/dropped/rejected traffic is not counted twice because it doesn't go anywhere.

One way to identify where you packets are coming from is turn on logging in all your filters for a short while. Your processor load could increase significantly and enabling all logging not something that is recommended as an ongoing setup.

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 takoateli over 16 years ago in reply to RFCat_vk_01

Ian,

Thanks for that info. Today there's no traffic on that port so all is well. Thanks.

Greg
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel