TZ600 - Port HTTP 6545

ALM

Hello,

in my sonicwall TZ600 (SonicROM 5.6.1.0) i have a lot of BWM at this port 6545. Do know you ?

With kind regards

Saravanan

Hi @ALM,

Thank you for reaching out to SonicWall Community.

It looks like TCP 6545 is a non-standard port and is not used by any of the SonicWall services by default. Also, this port doesn't seem to be associated with any well-known traffic.

So, the best way to determine what is causing high bandwidth on this port is to do a packet capture on the firewall on the basis of destination port TCP 6545. This can get you a clue of which local or external IP address is involved in passing traffic on this specific port.

Please find below web-link for instructions on using packet monitor feature on the SonicWall.

https://www.sonicwall.com/support/knowledge-base/running-a-packet-capture-for-tcp-and-or-udp-traffic/170505277474380/

Hope this helps.

Saravanan

Hi @ALM,

As per your screenshots, seems like the packet monitor setup was incorrect. Please try the below steps as listed.

In the Monitor Filter tab,

• Disable the check box "Enable filter based on the firewall/app rule".
• Ether Type: IP
• IP Type: TCP, UDP
• Destination Port: 6545
• Enable the check box "Enable Bidirectional Address and Port Matching".

Please have rest of the options set to Default.

In the Display Filter tab,

• Ensure all fields are empty and all check boxes are enabled.

In the Advanced Monitor Filter tab, please have the only check boxes enabled as represented below

• Monitor Firewall Generated Packets.
• Monitor Intermediate Packets.  
• Monitor intermediate reassembled traffic.  
• Monitor intermediate fragmented traffic.  

Please save the packet monitor settings and start the capture. Please wait for few seconds and then click on Refresh option to see the TCP/UDP 6545 packets if any happening through the firewall at the time of capture.

ALM

Ok thank for your answer, i have already check the block with packet monitor because is not corresponding with a rules.

With kind regards

ALM

Thank for you help, you close this post please, i have solved my problems.

With kind regards

Saravanan

Hi @ALM,

We are glad to hear that you are all set. It was indeed a pleasure assisting you.

Thank you for your interest towards SonicWall Community.

Have a good one!!!