From owner-freebsd-questions@freebsd.org  Thu Feb  9 20:33:18 2017
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 437BACD8763
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Thu,  9 Feb 2017 20:33:18 +0000 (UTC)
 (envelope-from thenewcq@optimum.net)
Received: from mta5.srv.hcvlny.cv.net (mta5.srv.hcvlny.cv.net [167.206.4.200])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128
 bits)) (Client CN "mail.optonline.net",
 Issuer "DigiCert SHA2 Secure Server CA" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 0D3AB15A8
 for <freebsd-questions@freebsd.org>; Thu,  9 Feb 2017 20:33:17 +0000 (UTC)
 (envelope-from thenewcq@optimum.net)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=optimum.net;
 s=dkim-001; t=1486668773;
 bh=BX4esAobY2ylbEuLMu3vDY9VIjoJiRY1USTnAKtvVYM=;
 h=Date:From:To:Subject:Message-ID;
 b=LBtuI3reLQre1LC1IEKD/rZFFsr+NL1SMk3b7Hs0gqh7/6fZqTbR0fL9JpkplOulO
 0a+wE997JcK9zhY3RqFJjaJUjcSr0saC2G3qMtJ0E76LpU+2G35tklHajcQsxRXeP+
 SGY0xVgWHAO4yLa/Ii+AXr8MbNSVg3PNyAV/ip1g/f/Acyrgxlu++JP/aFv8QMAOUN
 LgOBCMnx4fNhmBSzYoUsLTp4ogQgqtws4FwKp6iOQ11XdVz+l9sIQAbp18GpD3ddnq
 JGTrkWX+ciNd0d4Dmh/Nvaz9NUHxPIdo49j7Sn4TKT9sN+ZBDmtFuY7Hu6fAsD6sjK
 RzJh0GlsSlwow==
X-Content-Analysis: v=2.1 cv=bbKWK77B c=1 sm=1 tr=0
 a=6ZHx/kdBrWiwm0FuVBO0fg==:117 a=6ZHx/kdBrWiwm0FuVBO0fg==:17
 a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10 a=kj9zAlcOel0A:10
 a=bAAmCkz9I0oA:10 a=Tsg4g9soLm9rI4LSSoYA:9 a=CjuIK1q_8ugA:10
Received: from [69.125.2.106] ([69.125.2.106:57363] helo=newer.home)
 by mta1.srv.hcvlny.cv.net (envelope-from <thenewcq@optimum.net>)
 (ecelerity 3.6.9.48312 r(Core:3.6.9.0)) with ESMTP
 id 0C/1E-07859-5E3CC985; Thu, 09 Feb 2017 14:32:53 -0500
Date: Thu, 9 Feb 2017 14:32:58 -0500
From: sixto areizaga <thenewcq@optimum.net>
To: freebsd-questions@freebsd.org
Subject: wireshark issue
Message-ID: <20170209143258.3e560e02@newer.home>
In-Reply-To: <CAKM9q91KKxtqXRTG84Szefww+R--S1A7wvgSx5LV3jNS90=4qw@mail.gmail.com>
References: <CAKM9q91KKxtqXRTG84Szefww+R--S1A7wvgSx5LV3jNS90=4qw@mail.gmail.com>
X-Mailer: Claws Mail 3.14.0 (GTK+ 2.24.29; i386-portbld-freebsd11.0)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Feb 2017 20:33:18 -0000

Has anyone experienced something similar or have any info about the following using wireshark...

 
I was working on a webpage [that isn't up yet] no outside connections
established, I started apache [from computer #1], started wireshark
[same node] and opened firefox [computer #2] and for the url I did a
192.168.etc.etc

looking though packets transfered there was a transfer from outside my network - (the
ip might be in China) - it used putty [with sshv2] to get a
server/client key exchange.

it looked like a mobile device running a script except using putty 

anyone have a similar problem?