Unrecorgnized Vonage ip

Posts: 28 · Posted: Sun May 16, 2004 4:07 pm Post subject: Unrecorgnized Vonage ip

I got some Vonage strange ip addy's that I never seen before incomming to my router at local ports 33400 thru 33500.

WallReViewer - as of 05/16/2004 4:49:50 PM Eastern Standard Time (Timestamps are Local Time)
Dir Rem IP Addr Remote Name R Port Lcl IP Addr L Port
I 146.82.161.158 poll4.vonage.net 58589 xx.xx.xxx.xx 33465
I 146.82.161.156 poll2.vonage.net 44471 xx.xx.xxx.xx 33463
I 146.82.161.157 poll3.vonage.net 44473 xx.xx.xxx.xx 33462
I 146.82.161.159 poll5.vonage.net 37710 xx.xx.xxx.xx 33459
I 146.82.161.155 poll1.vonage.net 58576 xx.xx.xxx.xx 33462

Theres more but to many to put in here. Does anyone have any idea as to why its using these L ports

Safemaster

Posts: 183 · Vonage Forum Master Joined: May 05, 2004 Posts: 183

You'd have to put a packet sniffer on to see what's actually being transacted, but I'd bet that was recorded during an outgoing call and was handling the actual audio data.

Posts: 28 · Posted: Sun May 16, 2004 6:49 pm Post subject:

Its was prob a call but I thought that all voice data would use ports
10000 thru 20000 not in the 33000+ ports

Posts: 183 · Vonage Forum Master Joined: May 05, 2004 Posts: 183

Yeah, those are unusual port numbers, but if your outbound packets had "reply to" to those ports I suppose there's nothing strange about them (nor any need to have them forwarded).

Posts: 104 · Vonage Forum Senior Joined: Jan 31, 2004 Posts: 104

This is certainly something new. The port range is generally used for a TRACEROUTE.

Looking at the way it's incrementing the PORT for each request, feel certain that it is indeed a TRACEROUTE.

This could be Vonage looking for QOS issues with your service or simply gathering management data on the level of service their customers have.

Posts: 28 · Posted: Mon May 17, 2004 5:27 pm Post subject:

garys_2k wrote:

Yeah, those are unusual port numbers, but if your outbound packets had "reply to" to those ports I suppose there's nothing strange about them (nor any need to have them forwarded).

The ata 186 didn't respond to those packets cause I have those ports closed, I just noticed it from my logger. I'm going to open those ports and use the packet sniffer to see what's being exchanged there.

I'll keep you guys posted when I get more info on this, not that I'm worried just curious as to what’s going on there

Safemaster

Posts: 28 · Posted: Fri May 21, 2004 4:51 am Post subject:

Well nothing ....never saw them again.

Safemaster

Posts: 110 · Vonage Forum Senior Joined: Mar 06, 2004 Posts: 110

Could it have been related to periodic firmware upgrade attempts?