<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0" xmlns:blogChannel="http://backend.userland.com/blogChannelModule">

<channel>
<title>Topic &#x27;Re: Help: trls32.net and TCP port 61899&#x27; in forum &#x27;Security&#x27; - dslreports.com</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27702934</link>
<description></description>
<language>en</language>
<pubDate>Wed, 19 Jun 2013 06:23:05 EDT</pubDate>
<lastBuildDate>Wed, 19 Jun 2013 06:23:05 EDT</lastBuildDate>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27707690</link>
<description><![CDATA[Name Game posted : Bob might be looking for the timing code sequence for the snuke.<br><br>&raquo;<A HREF="http://code.google.com/p/episodes/source/browse/trunk/episodes.js?r=3" >code.google.com/p/episodes/sourc&middot;&middot;&middot;s.js?r=3</A>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27707690</guid>
<pubDate>Thu, 08 Nov 2012 13:28:57 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27707673</link>
<description><![CDATA[StuartMW posted : <div class="bquote"><said>said by <a href="/profile/655093" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=655093');">Name Game</a>:</said><p>...you been watch South Park again ???<br></p></div>Yup. Last night :) Cartman is my hero :D<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27707673</guid>
<pubDate>Thu, 08 Nov 2012 13:25:33 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27707655</link>
<description><![CDATA[Name Game posted : <div class="bquote"><said>said by <a href="/profile/181601" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=181601');">StuartMW</a>:</said><p><div class="bquote"><said>said by <a href="/profile/655093" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=655093');">Name Game</a>:</said><p>That Rocky Java Episode is  so big ...<br> </p></div>Did you see the other lovely stuff in it?<br><br>&raquo;<A HREF="http://dmru24w46caus.cloudfront.net/episodes.v0.32.min.js" >dmru24w46caus.cloudfront.net/epi&middot;&middot;&middot;2.min.js</A><br><br>Benign enough but geez..<br> </p></div>That looks like the  java query stuff for TV shows...you been watch South Park again ???<br><br><div class="bquote"><p>This page is instrumented using Episodes, a framework for timing web pages that works for Web 2.0 applications. Episodes is implemented using JavaScript events, making it easier for the data to be consumed by web metrics test agents, web development tools, and browsers, in addition to the web page itself. This example page demonstrates how Episodes works. The implementation is a proof-of-concept, but should work in most browsers.<br>Here are the episodes for this page. Use the reload link at the top to see the total load time.</p></div>&raquo;<A HREF="http://stevesouders.com/episodes/example.php" >stevesouders.com/episodes/example.php</A><br><br>Android has an app to do that also I think.<br><small>--<br>Gladiator Security Forum <br> &raquo;<A HREF="http://www.gladiator-antivirus.com/" >www.gladiator-antivirus.com/</A> <br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27707655</guid>
<pubDate>Thu, 08 Nov 2012 13:20:35 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27707218</link>
<description><![CDATA[StuartMW posted : <div class="bquote"><said>said by <a href="/profile/655093" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=655093');">Name Game</a>:</said><p>That Rocky Java Episode is  so big ...<br> </p></div>Did you see the other lovely stuff in it?<br><br>&raquo;<A HREF="http://dmru24w46caus.cloudfront.net/episodes.v0.32.min.js" >dmru24w46caus.cloudfront.net/epi&middot;&middot;&middot;2.min.js</A><br><br>Benign enough but geez..<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27707218</guid>
<pubDate>Thu, 08 Nov 2012 11:49:28 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706797</link>
<description><![CDATA[StuartMW posted : And I know, for a fact, that many sharks swim where you are :huh: And they eat surfers/divers from time to time.<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706797</guid>
<pubDate>Thu, 08 Nov 2012 10:21:18 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706787</link>
<description><![CDATA[norwegian posted : <div class="bquote"><said>said by <a href="/profile/655093" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=655093');">Name Game</a>:</said><p>I was wondering about the reboot thing myself..since the shark was not swimming all the time.<br> </p></div>It's obviously better to do so....but that is another topic for another day. :)]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706787</guid>
<pubDate>Thu, 08 Nov 2012 10:19:02 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706781</link>
<description><![CDATA[StuartMW posted : Well on the plus side it keeps Bob's supercomputers busy :D<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706781</guid>
<pubDate>Thu, 08 Nov 2012 10:18:24 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706771</link>
<description><![CDATA[Name Game posted : <div class="bquote"><said>said by <a href="/profile/181601" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=181601');">StuartMW</a>:</said><p><div class="bquote"><said>said by <a href="/profile/655093" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=655093');">Name Game</a>:</said><p>Illegitimi non carborundum  :mad:<br></p></div>Had to Google that. Latin is not my thing.<br><br>It's amazing how many websites try and connect on non-standard ports.<br><br>Unlike many I block anything outbound that is <i>not</i> in my "allow" list. If such an attempt is made I get email.<br> </p></div>Totally agree Buddie..now days you never really know from where your content is being delivered..who is punching your ticket in the mean time or where you are really going to end up. Find some more stuff..this is fun and enlightening.<br><small>--<br>Gladiator Security Forum <br> &raquo;<A HREF="http://www.gladiator-antivirus.com/" >www.gladiator-antivirus.com/</A> <br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706771</guid>
<pubDate>Thu, 08 Nov 2012 10:16:29 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706731</link>
<description><![CDATA[StuartMW posted : <div class="bquote"><said>said by <a href="/profile/655093" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=655093');">Name Game</a>:</said><p>Illegitimi non carborundum  :mad:<br></p></div>Had to Google that. Latin is not my thing.<br><br>It's amazing how many websites try and connect on non-standard ports.<br><br>Unlike many I block anything outbound that is <i>not</i> in my "allow" list. If such an attempt is made I get email.<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706731</guid>
<pubDate>Thu, 08 Nov 2012 10:07:34 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706721</link>
<description><![CDATA[Name Game posted : <div class="bquote"><said>said by <a href="/profile/1159554" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=1159554');">norwegian</a>:</said><p>I'm not seeing the traffic off a newly downloaded x64 bit version. <br><br>I am seeing my bob2 broadcast all over the place and google chrome do the same.....I do not see the communications you see.<br><br>I have not rebooted nor allowed the option to "start at bootup" either, maybe a reboot and the startup option allowed may see traffic; I have my doubts it would make any difference though.<br> </p></div>I was wondering about the reboot thing myself..since the shark was not swimming all the time.<br><small>--<br>Gladiator Security Forum <br> &raquo;<A HREF="http://www.gladiator-antivirus.com/" >www.gladiator-antivirus.com/</A> <br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706721</guid>
<pubDate>Thu, 08 Nov 2012 10:06:23 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706705</link>
<description><![CDATA[Name Game posted : <div class="bquote"><said>said by <a href="/profile/181601" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=181601');">StuartMW</a>:</said><p>I do? Well I don't mind buying him a virtual beer  ;) In fact free beers all round  :p It's past 5pm somewhere in the world!<br><br>Just made a firewall rule to drop that crap so my email box doesn't fill with warnings.<br><br>(Yes I have my router tell me when suspicious stuff happens)<br> </p></div>Illegitimi non carborundum  :mad:<br><small>--<br>Gladiator Security Forum <br> &raquo;<A HREF="http://www.gladiator-antivirus.com/" >www.gladiator-antivirus.com/</A> <br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706705</guid>
<pubDate>Thu, 08 Nov 2012 10:01:05 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706699</link>
<description><![CDATA[norwegian posted : The info on "The collector and DOM" it's a new story with Obama and the CIA".<br>Pssstt: this isn't Twitter is it?<br><br>-----<br><br>Seriously though.<br>Glad you got it sorted. <br><small>--<br>The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke<br><br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706699</guid>
<pubDate>Thu, 08 Nov 2012 09:59:36 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706693</link>
<description><![CDATA[Name Game posted : The web bug beacon...1x1<br><br>&raquo;<A HREF="http://serverfault.com/questions/57747/what-purpose-does-an-empty-gif-1x1-pix-file-serve" >serverfault.com/questions/57747/&middot;&middot;&middot;le-serve</A>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706693</guid>
<pubDate>Thu, 08 Nov 2012 09:58:48 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706677</link>
<description><![CDATA[StuartMW posted : I do? Well I don't mind buying him a virtual beer  ;) In fact free beers all round  :p It's past 5pm somewhere in the world!<br><br>Just made a firewall rule to drop that crap so my email box doesn't fill with warnings.<br><br>(Yes I have my router tell me when suspicious stuff happens)<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706677</guid>
<pubDate>Thu, 08 Nov 2012 09:55:43 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706665</link>
<description><![CDATA[Name Game posted : Tarnations Bullwinkle ! That Rocky Java Episode is  so big I am sure it's where Mr Pee "Bobby" pulls a rabbit out of a hat.<br><br>&raquo;<A HREF="http://www.youtube.com/watch?NR=1&v=kRW7pITY5Cg&" >www.youtube.com/watch?NR=1&v=kRW7pITY5Cg&</A>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706665</guid>
<pubDate>Thu, 08 Nov 2012 09:53:07 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706623</link>
<description><![CDATA[norwegian posted : <br>looks like you owe  Name Game <A HREF="/useremail/u/655093"><IMG SRC="http://i.dslr.net/bb/profile.gif" ALT="See Profile" BORDER=0 WIDTH=16 HEIGHT=11></A> a beer then. :)]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706623</guid>
<pubDate>Thu, 08 Nov 2012 09:42:55 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706590</link>
<description><![CDATA[StuartMW posted : SOLVED!<br><br>It's Javascript on the Wireshark homepage!<br><br><pre class="brush: text">&lt;script&gt; var EPISODES = EPISODES || {};EPISODES.q = &#91;&#93;;EPISODES.marks = {};EPISODES.newcookieVal = "3cf73358"; EPISODES.oldcookieVal = "e9d6ef01"; EPISODES.beaconUrl = "http://www.wireshark.org:61899/beacon/1x1.gif"; EPISODES.mark = function(mn, mt) { EPISODES.marks&#91;mn&#93; = mt || new Date().getTime()};EPISODES.measure = function(en, st, en) { EPISODES.q.push( &#91;"measure", en, st, en || new Date().getTime()&#93; ); };EPISODES.mark("firstbyte");EPISODES.domContentLoaded = function(e) {   EPISODES.mark("domcontentloaded");};if ( "undefined" != typeof(window.attachEvent) ) {     window.attachEvent("onDOMContentLoaded", EPISODES.domContentLoaded);   }else if ( window.addEventListener ){     window.addEventListener("DOMContentLoaded", EPISODES.domContentLoaded, false);   }(function() {                 var epjs = document.createElement("script"); epjs.type = "text/javascript"; epjs.async = true;                 epjs.src = "http://dmru24w46caus.cloudfront.net/episodes.v0.32.min.js";    var s = document.getElementsByTagName("script")&#91;0&#93;; s.parentNode.insertBefore(epjs, s);})();&lt;/script&gt;&#012; &#012;</pre><!--end code block--><br>&raquo;<A HREF="http://www.wireshark.org:" >www.wireshark.org:</A><b>61899</b>/beacon/1x1.gif"<br><br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706590</guid>
<pubDate>Thu, 08 Nov 2012 09:35:47 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706552</link>
<description><![CDATA[StuartMW posted : <div class="bquote"><said>said by <a href="/profile/1159554" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=1159554');">norwegian</a>:</said><p>I do not see the communications you see.<br></p></div>The traffic is <i>not</i> constant. Only happens 1-3 times per day.<br>  <BLOCKQUOTE><SMALL>quote:</SMALL><HR>The requests go out, from a PC, between 1 and three times per day but during the time I'm using the machine. <br><HR></BLOCKQUOTE><br><br>&raquo;<A HREF="/forum/r27704575-">Re: Help: trls32.net and TCP port 61899</A><br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706552</guid>
<pubDate>Thu, 08 Nov 2012 09:28:04 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706512</link>
<description><![CDATA[norwegian posted : I'm not seeing the traffic off a newly downloaded x64 bit version. <br><br>I am seeing my bob2 broadcast all over the place and google chrome do the same.....I do not see the communications you see.<br><br>I have not rebooted nor allowed the option to "start at bootup" either, maybe a reboot and the startup option allowed may see traffic; I have my doubts it would make any difference though.<br><small>--<br>The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke<br><br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706512</guid>
<pubDate>Thu, 08 Nov 2012 09:19:28 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706423</link>
<description><![CDATA[norwegian posted : <div class="bquote"><said>said by <a href="/profile/655093" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=655093');">Name Game</a>:</said><p>Several metrics are collected from the DOM (Document Object Model) of the users browser when the window.onload event fires. <br> </p></div>I remember being told to turn DOM storage off in browsers. I wonder if that would suggest any change in behavior? At least for IE and/or the default browser too as 2 tests?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706423</guid>
<pubDate>Thu, 08 Nov 2012 08:51:12 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706412</link>
<description><![CDATA[Name Game posted : The collector...<br><br>Website Performance Monitoring - WebTuna provides real user passive website monitoring as a service. Find out what the real end users are doing on your site, and the level of service that your web application is performing to. <br><br>&raquo;<A HREF="http://www.webstatsdomain.com/domains/www.webtuna.com/" >www.webstatsdomain.com/domains/w&middot;&middot;&middot;una.com/</A><br>When and Where is the WebTuna data sent?<br><br>Several metrics are collected from the DOM (Document Object Model) of the users browser when the window.onload event fires. This is after the page has already loaded so it will not slow down the speed of the page load. A few bytes of information is sent asynchronously back to via an HTTP(S) GET request to collector.webtuna.com where the data is processed and stored securely.<br><br>&raquo;<A HREF="http://www.webtuna.com/faqs/68-when-and-where-is-the-webtuna-data-sent" >www.webtuna.com/faqs/68-when-and&middot;&middot;&middot;ata-sent</A><br><small>--<br>Gladiator Security Forum <br> &raquo;<A HREF="http://www.gladiator-antivirus.com/" >www.gladiator-antivirus.com/</A> <br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706412</guid>
<pubDate>Thu, 08 Nov 2012 08:47:51 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706393</link>
<description><![CDATA[Name Game posted : cloudfront.net I think is some content delivery stuff on  80<br><br>&raquo;<A HREF="https://forums.aws.amazon.com/message.jspa?messageID=362691" >forums.aws.amazon.com/message.js&middot;&middot;&middot;D=362691</A><br><br>&raquo;<A HREF="https://forums.aws.amazon.com/message.jspa?messageID=352213" >forums.aws.amazon.com/message.js&middot;&middot;&middot;D=352213</A><br>&raquo;<A HREF="https://forums.aws.amazon.com/message.jspa?messageID=366849" >forums.aws.amazon.com/message.js&middot;&middot;&middot;D=366849</A><br>&raquo;<A HREF="http://www.safarimontage.com/support/ContentUpdate.aspx" >www.safarimontage.com/support/Co&middot;&middot;&middot;ate.aspx</A><br><small>--<br>Gladiator Security Forum <br> &raquo;<A HREF="http://www.gladiator-antivirus.com/" >www.gladiator-antivirus.com/</A> <br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706393</guid>
<pubDate>Thu, 08 Nov 2012 08:40:50 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706377</link>
<description><![CDATA[StuartMW posted : <div class="bquote"><said>said by <a href="/profile/655093" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=655093');">Name Game</a>:</said><p>All looks normal to me..what's not to like about it ?<br></p></div>I don't like the d3hmp0045zy3cs.cloudfront.net name. Most people use a human readable name for hosts. "d3hmp0045zy3cs" looks iffy to me.<br><br><b>collector</b>.webtuna.com looks like its benign but "collector" of what?<br><div class="bquote"><said>said by <a href="/profile/655093" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=655093');">Name Game</a>:</said><p>What version/build of wireshark do you have?<br></p></div>The latest (1.8.3). The 61899 requests only seem (have to confirm) to originate from my Win7 x64 box although the 32-bit bit version of Wireshark 1.8.3 is on my WinXP box.<br><br>It would seem, from all the info in this thread, that Wireshark 1.8.3 x64 is "phoning home". I haven't heard of that before but will check into it. It's being blocked anyway.<br><br>Seems everyone wants to know your stuff these days :(<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706377</guid>
<pubDate>Thu, 08 Nov 2012 08:35:04 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706342</link>
<description><![CDATA[Name Game posted : All looks normal to me..what's not to like about it ?<br>What version/build of wireshark do you have? ]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706342</guid>
<pubDate>Thu, 08 Nov 2012 08:14:53 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706285</link>
<description><![CDATA[StuartMW posted : <div class="bquote"><said>said by <a href="/profile/1159554" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=1159554');">norwegian</a>:</said><p>You don't have the cloud plug-in installed?<br> </p></div>Nope.<br><div class="bquote"><said>said by <a href="/profile/1618925" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=1618925');">ashrc4</a>:</said><p>Do you have the https everywhere add-on.<br> </p></div>Nope.<br><br>Haven't been looking at Quilts either.<br><br>I do have the <a href="https://addons.mozilla.org/en-us/firefox/addon/googlesharing/">Google Sharing</a> add-on and have the HTTPS option selected.<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706285</guid>
<pubDate>Thu, 08 Nov 2012 07:50:43 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706205</link>
<description><![CDATA[ashrc4 posted : Do you have the https everywhere add-on.<br><br> - s3.amazonaws.com/janrain.quilt/<br>+                       - Equivalent to d3hmp0045zy3cs.cloudfront.net<br><br>Been looking at quilts lately?? WTf<br><br>&raquo;<A HREF="https://gitweb.torproject.org/https-everywhere.git/commitdiff/448b3e3c030b9150da27c809fca6a050242ca8f2" >gitweb.torproject.org/https-ever&middot;&middot;&middot;242ca8f2</A><br><br>WEBTUNA infers https look-ups also.<br>&raquo;<A HREF="http://www.webtuna.com/faqs/68-when-and-where-is-the-webtuna-data-sent" >www.webtuna.com/faqs/68-when-and&middot;&middot;&middot;ata-sent</A><br><br>Which are delayed and sent back when available.<br><small>--<br>Paradigm Shift beta test pilot. "Dying to defend one's small piece of suburb...Give me something global...STAT!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706205</guid>
<pubDate>Thu, 08 Nov 2012 06:46:52 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706145</link>
<description><![CDATA[norwegian posted : <br>You don't have the cloud plug-in installed?<br><br>I remember a year or so back somewhere there was discussion on this feature - I've not been playing with the product as much lately to be upto date with the software.<br><br>It seems the Riverbed steelhead compression hardware we run at work also has big ties to Wireshark - something I've only learnt from your questions in this topic, even though it is plastered all over the main page of Wireshark.<br><small>--<br>The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke<br><br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27706145</guid>
<pubDate>Thu, 08 Nov 2012 04:53:02 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704993</link>
<description><![CDATA[StuartMW posted : Ahh ha! Wireshark just captured stuff!<br><br>Hmmm, don't like the look of this<br><br>d3hmp0045zy3cs.cloudfront.net (port 80)<br>collector.webtuna.com (port 80)<br>ipv4.wireshark.org (port 80)<br>www.wireshark.org (port 61899)]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704993</guid>
<pubDate>Wed, 07 Nov 2012 18:33:24 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704959</link>
<description><![CDATA[StuartMW posted : <div class="bquote"><said>said by <a href="/profile/1159554" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=1159554');">norwegian</a>:</said><p>I almost thought of Wireshark doing a lookup for updates, but using the home page address seems unusual to say the least. <br> </p></div>Well something would have to be running to look for updates. I keep saying, over and over again, Wireshark has not been running during these connection attempts nor can I find any service etc related to Wireshark.<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704959</guid>
<pubDate>Wed, 07 Nov 2012 18:21:28 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704953</link>
<description><![CDATA[StuartMW posted : <div class="bquote"><said>said by <a href="/profile/1159554" onClick="this.blur(); return popup(event,'/uidpop?ajh=1&uid=1159554');">norwegian</a>:</said><p>However you hint at not being aware of a Steelhead on your network.</p></div>This is my home network. I know everything on it and there's no "Steelhead".<br><br>Seems like no-one can find anything other than that I've found myself.<br><br>Wireshark hasn't captured anything yet. Guess I'll leave it running...<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704953</guid>
<pubDate>Wed, 07 Nov 2012 18:19:45 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704952</link>
<description><![CDATA[norwegian posted : <br>As  psloss <A HREF="/useremail/u/590688"><IMG SRC="http://i.dslr.net/bb/profile.gif" ALT="See Profile" BORDER=0 WIDTH=16 HEIGHT=11></A> pointed out it is a record for Wireshark. Just type the IP in the address field of your browser, without a DNS lookup, it is a direct link to Wireshark's home page. <br><br>I almost thought of Wireshark doing a lookup for updates, but using the home page address seems unusual to say the least. <br><small>--<br>The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke<br><br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704952</guid>
<pubDate>Wed, 07 Nov 2012 18:19:20 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704681</link>
<description><![CDATA[redwolfe_98 posted : i am seeing the same thing that "name game" is seeing:<br><br>174.137.42.75 = www.wireshark.org<br><br>&raquo;<A HREF="http://ip.robtex.com/174.137.42.75.html" >ip.robtex.com/174.137.42.75.html</A>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704681</guid>
<pubDate>Wed, 07 Nov 2012 17:03:34 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704602</link>
<description><![CDATA[norwegian posted : I doubt a Riverbed steelhead would have local access to a computer unless you were administering the console for it from that box. However you hint at not being aware of a Steelhead on your network.<br><br>The only other item for that port initially seems to be:<br>Xsan is Apple Inc.'s storage area network (SAN) or clustered file system for Mac OS X<br><br>Guess Wireshark will at least give you a little more info.<br><small>--<br>The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke<br><br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704602</guid>
<pubDate>Wed, 07 Nov 2012 16:39:33 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704575</link>
<description><![CDATA[StuartMW posted : Well I already posted a WhoIs on trls32.net . Doesn't tell me a lot.<br><br>The requests go out, from a PC, between 1 and three times per day but during the time I'm using the machine. Yes that box has Wireshark on it but it has <i>not</i> been running at the time. I don't see any Wireshark related services running.<br><br>I do have Wireshark running today to see if I can capture packets directed to TCP port 61899.<br><br>FYI I see no port 61898 inbound or outbound stuff (both would be blocked) in my logs.<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704575</guid>
<pubDate>Wed, 07 Nov 2012 16:28:39 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704548</link>
<description><![CDATA[norwegian posted : Also this seems pertinent to that site:<br><br><div class="bquote"><p>TRLS32.NET - Domain Information  <br>Domain	TRLS32.NET	  [ Site Info  Traceroute  RBL/DNSBL lookup ]<br>Registrar	LIME LABS, LLC<br>Registrar URL	&raquo;<A HREF="http://www.limedomains.com" >www.limedomains.com</A><br>Whois server	whois.limedomains.com<br>Created	14-Sep-2011<br>Updated	23-Oct-2012<br>Expires	14-Sep-2012<br>Time Left	0 days 0 hours 0 minutes<br>Status	redemptionPeriod<br>DNS servers	NS1.GOTONAMES.COM   64.92.114.5<br>NS2.GOTONAMES.COM   64.90.182.175<br>TRLS32.NET - Whois Information</p></div>Limedomains.com is GotoNames, a free domain host site.<br><small>--<br>The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke<br><br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704548</guid>
<pubDate>Wed, 07 Nov 2012 16:22:04 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704527</link>
<description><![CDATA[Name Game posted : &raquo;<A HREF="http://cnet.robtex.com/174.137.42.html" >cnet.robtex.com/174.137.42.html</A><br><br>Wireshark....<br>Pilot 61898/tcp  Pilot Probe default control port<br>SEE BOTTOM PAGE 22<br>&raquo;<A HREF="http://www.cacetech.com/documents/Filters_Manual_May2010.pdf" >www.cacetech.com/documents/Filte&middot;&middot;&middot;2010.pdf</A><br><br>"Bob to Pilot.."<br><br>"I'm here Boss.."<br><br>"Head over to Galt's Gulch with the two finger probe and see if anyone is bending over today.."<br><br>"Roger that.."<br><br>"this is Bob not Roger.."<br><br>"Roger that Bob..surely you jest.."<br><small>--<br>Gladiator Security Forum <br> &raquo;<A HREF="http://www.gladiator-antivirus.com/" >www.gladiator-antivirus.com/</A> <br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704527</guid>
<pubDate>Wed, 07 Nov 2012 16:16:02 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704405</link>
<description><![CDATA[norwegian posted : Riverbed products are a hardware compression box for helping transmission of user data. We use steelheads on our network.<br><br>I can check with our admin on this protocol?<br><br> <br><small>--<br>The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke<br><br></small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27704405</guid>
<pubDate>Wed, 07 Nov 2012 15:47:27 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27703890</link>
<description><![CDATA[StuartMW posted : I found that there's a product called <a href="http://www.riverbed.com/us/products/cascade/cascade_pilot.php">Cascade Pilot</a><br><br><div class="bquote"><p>Riverbed® Cascade® Pilot software is a robust packet analysis console that enables users to quickly analyze multi-terabyte packet recordings on remote Cascade Shark appliances, Cascade Shark Virtual Edition, and Steelhead® WAN optimization products without having to transfer large packet captures files across the network.<br></p></div>that uses TCP port 61899.<br><br><div class="bquote"><p>I understand that Cascade Pilot Personal Edition has a client/server architecture but that these two parts must reside on the same system. Which port(s) does the client use and which port(s) does the server use?<br><br>The client is not bound to a specific port. The Server uses ports 61898 and 61899, but you can change them to whatever you prefer.<br></p></div>I've never heard of Cascade Pilot but maybe someone (Bob?) is trying to monitor my traffic. It's being blocked but I'd like to identify what is generating it.<br><br>BTW I do have and use WireShark but my logs of attempts to trls32.net don't correspond with its usage. That said I have WireShark running now to capture anything sent to TCP port 61899.<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27703890</guid>
<pubDate>Wed, 07 Nov 2012 13:58:56 EDT</pubDate>
</item>

<item>
<title>Re: Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27703792</link>
<description><![CDATA[psloss posted : Not sure it definitively identifies the activity, but there is an A record for www.wireshark.org that points to 174.137.42.75.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Re-Help-trls32net-and-TCP-port-61899-27703792</guid>
<pubDate>Wed, 07 Nov 2012 13:35:38 EDT</pubDate>
</item>

<item>
<title>Help: trls32.net and TCP port 61899</title>
<link>http://www.dslreports.com/forum/Help-trls32net-and-TCP-port-61899-27702934</link>
<description><![CDATA[StuartMW posted : For some time now my router/firewall has been blocking connection attempts to<br><br>174.137.42.75 (trls32.net), TCP port 61899<br><br>This does not seem to be from malware but appears to correspond to browser activity.<br><br>Unfortunately I can find nothing meaningful (except for WhoIs below) about trls32.net<br><br><div class="bquote"><p>OrgName: RagingWire Enterprise Solutions, Inc.<br>OrgId: RES-35<br>Address: PO BOX 348060<br>City: Sacramento<br>StateProv: CA<br>PostalCode: 95834<br>Country: US<br>RegDate: 2006-12-27<br>Updated: 2012-07-16<br>Ref: &raquo;<A HREF="http://whois.arin.net/rest/org/RES-35" >whois.arin.net/rest/org/RES-35</A><br></p></div>or TCP port 61899.<br><br>I'm hoping someone has an idea.<br><small>--<br>Don't feed trolls--it only makes them grow!</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/Help-trls32net-and-TCP-port-61899-27702934</guid>
<pubDate>Wed, 07 Nov 2012 10:18:06 EDT</pubDate>
</item>

</channel>
</rss>
