From owner-freebsd-questions@freebsd.org  Thu Feb  9 23:04:08 2017
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2837FCD86EA
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Thu,  9 Feb 2017 23:04:08 +0000 (UTC)
 (envelope-from thenewcq@optimum.net)
Received: from mta3.srv.hcvlny.cv.net (mta3.srv.hcvlny.cv.net [167.206.4.198])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128
 bits)) (Client CN "mail.optonline.net",
 Issuer "DigiCert SHA2 Secure Server CA" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id E3A121A4E
 for <freebsd-questions@freebsd.org>; Thu,  9 Feb 2017 23:04:07 +0000 (UTC)
 (envelope-from thenewcq@optimum.net)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=optimum.net;
 s=dkim-001; t=1486680238;
 bh=0oSP4+kJmx3OfBCUU+zb8KYxWgh82T4YU6Nx2Y9lXMg=;
 h=Date:From:To:Subject:Message-ID;
 b=BPDMWJ4WP2kjr857VB9hu9SKyuZXQEHGe+OO+HaXo1lVyxBRhqk5cmEe6NyTh04B9
 1i6/F4VGGb3f0yB8jNmPvFQQlep8JwRCa+k4k5VBjOba1rrO9GbZrxDHDLxbgTE0yQ
 Cnm4rQRyXkKH+x/2VGaMaZh/YS0dF4gacjTZ/SdT1ZxJhuSnDx8g58g7dKJtAGTnw0
 //9IWYGsE8rPgiKov7pIxoVMpRos4kzyEQVGT1654Q9DujKlwHoZqLOtL5R0bH0Fw9
 IGCNU5ABEnTMvb4j/6UEoaTBOa3oN420zHjo6Dc1Dihrh1MzLPLo33hAkBYmZ42LBM
 487eXcWULU+IQ==
X-Content-Analysis: v=2.1 cv=U+Bvdrfu c=1 sm=1 tr=0
 a=6ZHx/kdBrWiwm0FuVBO0fg==:117 a=6ZHx/kdBrWiwm0FuVBO0fg==:17
 a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10 a=kj9zAlcOel0A:10
 a=bAAmCkz9I0oA:10 a=Tsg4g9soLm9rI4LSSoYA:9 a=CjuIK1q_8ugA:10
Received: from [69.125.2.106] ([69.125.2.106:52765] helo=newer.home)
 by mta3.srv.hcvlny.cv.net (envelope-from <thenewcq@optimum.net>)
 (ecelerity 3.6.9.48312 r(Core:3.6.9.0)) with ESMTP
 id 30/36-11926-EA0FC985; Thu, 09 Feb 2017 17:43:58 -0500
Date: Thu, 9 Feb 2017 17:44:05 -0500
From: sixto areizaga <thenewcq@optimum.net>
To: freebsd-questions@freebsd.org
Subject: wireshark issue
Message-ID: <20170209174405.5d551b88@newer.home>
In-Reply-To: <CAKM9q91KKxtqXRTG84Szefww+R--S1A7wvgSx5LV3jNS90=4qw@mail.gmail.com>
References: <CAKM9q91KKxtqXRTG84Szefww+R--S1A7wvgSx5LV3jNS90=4qw@mail.gmail.com>
X-Mailer: Claws Mail 3.14.0 (GTK+ 2.24.29; i386-portbld-freebsd11.0)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Feb 2017 23:04:08 -0000

Has anyone experienced something similar or have any info about the
following using wireshark...

 
I was working on a webpage [that isn't up yet] no outside connections
established, I started apache [from computer #1], started wireshark
[same node] and opened firefox [computer #2] and for the url I did a
192.168.etc.etc

looking though packets transfered there was a transfer from outside my
network - (the ip might be in China) - it used putty [with sshv2] to
get a server/client key exchange.

it looked like a mobile device running a script except using putty 

anyone have a similar problem?