There is no guarantee that port 1025 will contain traffic of a certain type - if fact, that is true for just about any port - but particularly true for ports numbered greater than 1024.
If I were you I'd right click in wireshark and choose follow the stream - this should filter out all the other packets and just show this conversation - this may help in identifying what traffic is seen in this conversation.
So the answer to your question is: anything really. Not very helpful. Perhaps you could post more detail about the traffic you're seeing?
Regards
Main Topics
Browse All Topics





by: NetExpert-WarszawaPosted on 2009-09-14 at 12:15:17ID: 25328365
An official 1025 assignment is a network blackjack. In real life this is the first port number after a restricted pool. You can expect many connections use it just because of it.
om/default .aspx?scid =KB;en- us; q280132
Some Ms services listen on 1025 - e.g. see http://support.microsoft.c