port monitoring question
i was wondering if someone could help me out with this question
i installed darkstat to monitor my network activity you can monitor the activity through your web browser by typing: http://localhost:667 so my my question is this: it listens on local port 667 right?? (or whatever random port, doesn't matter) but if my traffic is going through port 80 or 8080 or 25 (whatever port) why is it listening on port 667??? is my traffic going through local 667 first and then local port 80?? i don't get it can someone please explain and lets say i'm using tor, and it is channeling connects through port 7070, does it go through 667 first so that darkstat can monitor what is going through??? i would greatly appreciate personal insight and any relevant articles thanks in advance |
Quote:
errm...it listens on that port for http connections - just so you can connect to it and see the pretty graphs etc and also for configuration i would think. it gathers all the traffic details using libpcap, and just grabbing all the data flowing through the network interface(s) - whichever you choose to monitor |
All times are GMT -5. The time now is 06:17 PM. |