rejetto forum

Software => HFS ~ HTTP File Server => Topic started by: gattovicentino on August 06, 2017, 09:08:42 PM

Title: strange Log ?
Post by: gattovicentino on August 06, 2017, 09:08:42 PM
Hello,

I configured my HFS server to log some more details than the default ones (for instance: connections, disconnections, browsing...).
Today I could see more than 200 connection attempts in the same minute (actually, a total of 6 seconds), all them from 2 ip numbers: 192.168.1.7 and 80.180.x.x. They both are the ip numbers of the same machine where HFS is installed (the private ip address and the public one).
It happened at 19.44 :

19.44.26 192.168.3.7:1862 Connected
19.44.26 192.168.3.7:1863 Connected
19.44.26 192.168.3.7:1862 Disconnected by server - 2435 bytes sent
19.44.26 192.168.3.7:1864 Connected
19.44.26 192.168.3.7:1863 Disconnected by server - 2435 bytes sent
19.44.26 192.168.3.7:1865 Connected
19.44.26 192.168.3.7:1864 Disconnected by server - 2435 bytes sent
19.44.26 192.168.3.7:1865 Disconnected by server - 2435 bytes sent
19.44.26 192.168.3.7:1866 Connected
19.44.26 192.168.3.7:1866 Disconnected by server - 2435 bytes sent
19.44.26 192.168.3.7:1867 Connected
19.44.26 192.168.3.7:1867 Disconnected by server - 2435 bytes sent

... and so, many more attempts, for a couple of seconds, with port number increasing step by step, up to 1943, and then beginned the same stuff, after a pause of 3 seconds (at 19.44.30), but this time using the public address (80.180.x.x.): dozens more attempts, from port 1946 to port 2027. This process has ended at 19.44.32.


What does it mean?

Thanks
 
Title: Re: strange Log ?
Post by: bmartino1 on August 09, 2017, 09:03:50 PM
I would have you use more Network tools such as wire shark and a bet stat. This looks like a bad internet connection.

To many "reconnect"

Cnd net stat -a
Title: Re: strange Log ?
Post by: gattovicentino on August 10, 2017, 10:23:18 AM
thanks for your answer, but the internet connection seems to be fine (Vdsl) and "clean" (firewall and IP blocker are active); the IP numbers trying to connect and reconnect, as the log I have pasted in my previous post shows, are the same of the machine where HFS server is hosted: private ip (192.168.x.x) and public ip ... and it only happens once or twice a day, for a few seconds.
Title: Re: strange Log ?
Post by: bmartino1 on August 11, 2017, 08:30:35 PM
Ok, then I would have you double check the IP block/ try with firewall disabled(temporary). If it all on the same PC, then there's a couple error in the network config of your PC.

Wire shark would help diagnose that further...

http://filehippo.com/download_wireshark/32/
Title: Re: strange Log ?
Post by: dianemontalvo2019 on January 17, 2019, 12:39:08 PM
Ok, then I would have you double check the IP block/ try with firewall disabled(temporary). If it all on the same PC, then there's a couple error in the network config of your PC.

Wire shark would help diagnose that further...

http//filehippo.com/download_wireshark/32/

Thanks for mentioning a wire shark! I was looking for a program to diagnose my network settings!