Curious question about pfTop

[killmasta93]

Hi,
I was wondering if someone could help understand what port is 48183 because the other port it seems to be a redis port. See picture

Thank you

[johnpoz]

so your asking about random source port used?  So your asking about Ephemeral port??

[killmasta93]

Hi johnpoz
sorry let me rephrase my question: what is or why is there communication to those ports?

Thank you  :)

[doktornotor]

You already answered it yourself…

[johnpoz]

What packages are you running are you trying to find out what pid is making the connection?  Then run sockstat

[killmasta93]

yeah I guess im trying to figure out why is there communication though those ports? around 24bytes now its at 111bytes not that its a big issue just wanted to understand what it means

Thank you

[johnpoz]

I don't have any connections like that on my pfsense - so you must be running a package that uses redis?

[killmasta93]

hey thanks for the reply I think its ntopng my packages are

ntopng
pfblockerNG dev
sarg
squid3
squidguard

[johnpoz]

yeah a quick look see for prereq for ntop shows redis so yeah this most likely it.  doing a sockstat should show you the exact pids with it open, etc..