[SOLVED] port monitoring question

NS-5 · 08-05-2010, 05:12 AM

i was wondering if someone could help me out with this question

i installed darkstat to monitor my network activity

you can monitor the activity through your web browser by typing:
http://localhost:667

so my my question is this:
it listens on local port 667 right?? (or whatever random port, doesn't matter)
but if my traffic is going through port 80 or 8080 or 25 (whatever port)
why is it listening on port 667??? is my traffic going through local 667 first and then local port 80??
i don't get it

can someone please explain

and lets say i'm using tor, and it is channeling connects through port 7070, does it go through 667 first so that darkstat can monitor what is going through???

i would greatly appreciate personal insight and any relevant articles

thanks in advance

centosboy · 08-05-2010, 06:21 AM

Quote:

Originally Posted by NS-5

i was wondering if someone could help me out with this question

i installed darkstat to monitor my network activity

you can monitor the activity through your web browser by typing:
http://localhost:667

so my my question is this:
it listens on local port 667 right?? (or whatever random port, doesn't matter)
but if my traffic is going through port 80 or 8080 or 25 (whatever port)
why is it listening on port 667??? is my traffic going through local 667 first and then local port 80??
i don't get it

can someone please explain

and lets say i'm using tor, and it is channeling connects through port 7070, does it go through 667 first so that darkstat can monitor what is going through???

i would greatly appreciate personal insight and any relevant articles

thanks in advance

errm...it listens on that port for http connections - just so you can connect to it and see the pretty graphs etc and also for configuration i would think.
it gathers all the traffic details using libpcap, and just grabbing all the data flowing through the network interface(s) - whichever you choose to monitor