TZ600 - Port HTTP 6545

Best Answers

• CORRECT ANSWER

  Saravanan Moderator

  July 2020 Answer ✓

  Hi @ALM,

  Thank you for reaching out to SonicWall Community.

  It looks like TCP 6545 is a non-standard port and is not used by any of the SonicWall services by default. Also, this port doesn't seem to be associated with any well-known traffic.

  So, the best way to determine what is causing high bandwidth on this port is to do a packet capture on the firewall on the basis of destination port TCP 6545. This can get you a clue of which local or external IP address is involved in passing traffic on this specific port.

  Please find below web-link for instructions on using packet monitor feature on the SonicWall.

  https://www.sonicwall.com/support/knowledge-base/running-a-packet-capture-for-tcp-and-or-udp-traffic/170505277474380/

  Hope this helps.

  Regards

  Saravanan V

  Technical Support Advisor - Premier Services

  Professional Services

  5
• CORRECT ANSWER

  Saravanan Moderator

  July 2020 edited July 2020 Answer ✓

  Hi @ALM,

  As per your screenshots, seems like the packet monitor setup was incorrect. Please try the below steps as listed.

  In the Monitor Filter tab,

  • Disable the check box "Enable filter based on the firewall/app rule".
  • Ether Type: IP
  • IP Type: TCP, UDP
  • Destination Port: 6545
  • Enable the check box "Enable Bidirectional Address and Port Matching".

  Please have rest of the options set to Default.

  In the Display Filter tab,

  • Ensure all fields are empty and all check boxes are enabled.

  In the Advanced Monitor Filter tab, please have the only check boxes enabled as represented below

  • Monitor Firewall Generated Packets.
  • Monitor Intermediate Packets.  
  • Monitor intermediate reassembled traffic.  
  • Monitor intermediate fragmented traffic.  

  Please save the packet monitor settings and start the capture. Please wait for few seconds and then click on Refresh option to see the TCP/UDP 6545 packets if any happening through the firewall at the time of capture.

  Regards

  Saravanan V

  Technical Support Advisor - Premier Services

  Professional Services

  5