I'm trying to use wireshark to determine what ports a certain program uses. The program connects to the server fine if we are on the same network, but I obviously need to forward the ports on the firewall to use it outside of the office.
I turn on wireshark, and try to establish the connection from the program to 192.168.1.6. I then look at the packets that are going to and from 192.168.1.6.
They are all TCP and say:
Source: 192.168.1.130 Dest: 192.168.1.6 Service: TCP Info: 49716 > 808 [PSH, ACK] Seq=1102 Ack=395 Win=65304 Len=87
or some coming the other way
Source: 192.168.1.6 Dest: 192.168.1.130 Service: TCP Info: 808 > 49710 [ACK] Seq=2 Ack=320 Win=254 Len=0
My question is:
I take it this is just port 808, the other port (source port) changes occasionally betwen 49710 and 49716, what does this mean?
does is the traffic coming the other way part of an open connection? Or do I need to make sure the client PC has port 808 connecting to their PC as well?