You are not logged in.

Pages: 1

#1 2012-05-07 03:34:47

aetherfly
Member
From: The SWAMP
Registered: 2010-08-01
Posts: 14
Website

rTorrent floods SYN packets on start

For a reason that now escapes me, I became curious about the network traffic coming from my server. I installed iptraf-ng and to my surprise I found that my machine was sending out hundreds of SYN packets from random ports to random IP's and ports, as shown below. After a little investigating, I found that the culprit was rTorrent; as the below is what iptraf-ng captures immediately upon starting rTorrent. I did some searching around and haven't found anything really insightful. Does anyone know what this is? Is rTorrent attempting to reconnect to old peers? Is my rTorrent client infected and performing some sort of reconnaissance? Any insight into my dilemma is greatly appreciated. 

Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38368 to 98.195.202.241:55626; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50876 to 85.24.189.247:34877; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:58705 to 108.9.200.28:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:39513 to 188.177.18.91:64805; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:46043 to 82.236.247.178:48492; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:43655 to 77.206.225.39:29985; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:45732 to 71.123.231.111:18302; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50542 to p2012-ipbf08kouchinwc.kochi.ocn.ne.jp:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:59562 to 87.163.128.81:54321; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:41083 to pales.bytesized-hosting.com:49147; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:57510 to 131.252.222.203:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:33542 to 77.35.156.155:23835; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38095 to 91.204.58.102:6882; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:46397 to pool-108-38-66-128.lsanca.fios.verizon.net:63587; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:39614 to 50.46.198.164:45038; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:56201 to 78-56-212-233.static.zebra.lt:40196; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:46811 to 81.182.151.96:55243; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:59949 to 88-190-18-235.rev.dedibox.fr:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:60392 to masq119.gtn.ru:6881; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:41894 to zir0h.dyndns.org:49000; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:57596 to 82-69-37-49.dsl.in-addr.zen.co.uk:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38022 to 94.242.218.40:50534; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:41007 to 108.192.161.148:23414; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:59813 to delta.tenet.odessa.ua:20360; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:37442 to 71.126.222.87.dynamic.jazztel.es:6881; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50646 to 213.58.162.94:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:58536 to 220.212.219.87.dynamic.jazztel.es:6886; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:55245 to 93.71.70.212:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:40993 to 97.80.178.67:23812; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:47819 to 93.100.16.227.pool.sknt.ru:43753; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:53963 to 189.144.227.44:54720; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:39460 to 30.15.70.86.rev.sfr.net:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:37577 to 68-118-96-147.dhcp.kgpt.tn.charter.com:6881; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:56321 to 74.195.229.29:14424; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:60996 to ip151-10.ct.co.cr:19974; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:36800 to 178.204.147.206:28150; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:49934 to adsl-99-101-214-139.dsl.hstntx.sbcglobal.net:20395; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:39212 to 94.23.47.29:10301; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:52671 to 96.25.245.229:59250; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:37992 to 78.47.234.59:swismgr2; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:33551 to 78.241.41.24:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:59270 to cpe-76-190-222-126.neo.res.rr.com:62815; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:48328 to pool-100-40-23-203.prvdri.fios.verizon.net:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50376 to static-71-241-233-226.washdc.fios.verizon.ne:37423; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:45860 to 88.206.115.162:64646; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:40561 to 70.177.163.53:54890; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50961 to bl18-120-197.dsl.telepac.pt:49414; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:33850 to 89.251.20.138:51413; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:57434 to client-80-1-160-22.bsh-bng-011.adsl.virginme:6881; first packet (SYN)
Sun May  6 23:00:33 2012; TCP; eth0; 60 bytes; from 10.114.63.37:44278 to 121.219.37.216:45727; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:45181 to 67.1.35.81:16804; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:39932 to 71.7.210.72:11311; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50912 to 89.214.99.49:16240; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:41190 to 196.217.164.38:11518; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:40006 to 69.181.185.234:64504; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:56967 to 110.159.142.90:12512; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:45272 to 173.212.102.117:24763; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:43754 to 90.229.206.159:drm-produc; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:48968 to 199.48.231.86:22766; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:59801 to 69.80.8.109:58181; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:58139 to 212.143.220.154:56441; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:37803 to 80.76.163.245:12464; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:37373 to 80.195.168.95:https; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:51455 to 68.56.63.130:33305; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:56224 to 110.159.162.200:25741; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:47370 to 109.226.57.222:57850; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:39398 to 190.50.184.38:28316; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:42544 to 178.152.119.80:35777; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38506 to 79.113.46.147:51780; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38703 to 189.60.39.40:22370; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50230 to 75.118.101.28:51413; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:37398 to 79.114.79.251:45772; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:60094 to 71.226.64.210:54786; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:57173 to 72.189.17.75:46541; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:41404 to ip68-4-198-89.oc.oc.cox.net:5807; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:46483 to 82.12.186.145:17326; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:48905 to 77.126.120.212:20877; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:35301 to adsl-98-83-104-208.bhm.bellsouth.net:16667; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:44735 to 70.67.167.35:42346; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:55113 to 86.176.211.189:46036; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:44386 to 188.220.35.121:7739; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:56192 to 70.78.217.70:17647; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50053 to ip565a81cb.direct-adsl.nl:27501; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50701 to 115.161.110.101:44816; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:46558 to 76.183.83.76:32244; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:41533 to 196.209.230.5:27123; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:36694 to 115.64.162.4:24831; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:51814 to 137.186.127.178:61494; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:37432 to 174.60.172.220:62991; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:39398 to 83.97.248.208:63143; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:34172 to 87.119.173.167:6890; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:51620 to 124.182.81.133:12368; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:48726 to 71.93.140.180:35600; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:37335 to cpe-173-172-197-29.elp.res.rr.com:58932; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:39490 to 13.pool85-60-138.dynamic.orange.es:57915; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:44695 to 178.61.18.178:25285; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38760 to 70.73.20.134:16956; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:58445 to 108.83.129.56:14140; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:55895 to d175-39-54-110.sbr801.nsw.optusnet.com.au:53982; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:58898 to 117.192.4.228:44030; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:53010 to 124-170-2-91.dyn.iinet.net.au:17124; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:48757 to d149-67-53-231.try.wideopenwest.com:51413; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:52570 to 75.27.20.85:60256; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:46476 to pool-96-255-216-142.washdc.fios.verizon.net:37988; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:59614 to 72-48-189-195.dyn.grandenetworks.net:25200; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:43655 to 75-18-254-215.lightspeed.uncyca.sbcglobal.ne:24874; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:43739 to 99.153.233.184:20416; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:40373 to 71.179.8.85:51413; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:43693 to 86.45.244.2:43611; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:43251 to 41-132-36-192.dsl.mweb.co.za:42584; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:60345 to 121.54.32.150:28679; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38932 to 213-157-190.netrun.cytanet.com.cy:33270; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50912 to 99.37.191.251:14496; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:47955 to 108.213.78.127:62348; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:dgi-serv to ip174-70-41-96.om.om.cox.net:37055; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:52867 to CPE-76-177-127-44.natcky.res.rr.com:63554; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:34351 to 203.102.137.29:40615; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:33255 to 72-187-165-12.res.bhn.net:31121; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:43690 to pool-72-81-254-71.bltmmd.fios.verizon.net:14760; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:54460 to 99.142.21.162:25932; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:42668 to 174.59.210.46:51413; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:58633 to adsl-98-88-10-165.asm.bellsouth.net:37982; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:40033 to ool-182f189f.dyn.optonline.net:36550; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:41293 to 68.98.172.180:52992; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:41047 to 130-89-27-72-br1-DYNAMIC-dsl.cwjamaica.com:21942; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:48901 to host-92-4-7-247.as43234.net:29420; first packet (SYN)
Sun May  6 23:00:34 2012; TCP; eth0; 60 bytes; from 10.114.63.37:49124 to port164.ds1-vey.adsl.cybercity.dk:38190; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:59701 to pool-72-72-245-136.altnpa.east.verizon.net:14989; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:34128 to 99-44-9-104.lightspeed.btrgla.sbcglobal.net:20152; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:42297 to 50.88.154.199:17954; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:59097 to 203.115.84.19:36970; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:56285 to c-98-212-74-163.hsd1.in.comcast.net:31999; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38868 to 69.158.122.181:54759; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:40010 to 180.131.251.52:21581; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:47050 to 97.77.82.128:51413; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:43767 to cpe-184-59-140-152.neo.res.rr.com:47805; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:58977 to 76.105.251.164:15935; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:56328 to CPE-75-86-245-208.wi.res.rr.com:39781; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38069 to CPE0026f30cd0f8-CM0026f30cd0f5.cpe.net.cable:31005; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:53680 to c-24-17-244-160.hsd1.wa.comcast.net:35543; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:36362 to 110.174.220.65:44572; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:49536 to 115.69.57.108:31589; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:54723 to 69.4.101.82:51413; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38867 to 142.167.18.5:32998; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:55477 to 94.54.108.222:16660; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:54185 to 190.213.173.122:53031; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:49181 to c-68-84-150-177.hsd1.nm.comcast.net:50000; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:53030 to dsl-67-212-10-91.acanac.net:10271; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:37913 to 117.111.240.10:35051; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:52626 to 190.45.116.17:13850; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50711 to 176.61.111.127:57841; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:42923 to c-98-207-59-120.hsd1.ca.comcast.net:56183; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:40995 to ppp-p5-220.rt-lv13.jax.centurytel.net:31254; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:54432 to bas7-kitchener06-1178019229.dsl.bell.ca:11237; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:44762 to 98.234.72.167:26127; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:51500 to 112.206.44.211.pldt.net:16359; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:44773 to d199-74-247-96.nap.wideopenwest.com:30613; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:41345 to 59.167.91.125:49200; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:50487 to pool-173-60-227-171.lsanca.fios.verizon.net:59046; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:52113 to 216.65.189.251:37844; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:57915 to 24-216-237-152.dhcp.mdfd.or.charter.com:16463; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:47511 to 83.152.122.46:51413; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:38742 to 72.131.53.85:6893; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:51463 to 78.46.36.189:23023; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:35374 to 99.116.28.89:16151; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:56473 to 132.178.129.127:51413; first packet (SYN)
Sun May  6 23:00:35 2012; TCP; eth0; 60 bytes; from 10.114.63.37:51678 to c-71-193-205-117.hsd1.or.comcast.net:59223; first packet (SYN)

Offline

#2 2012-05-07 13:09:55

x33a
Forum Fellow
Registered: 2009-08-15
Posts: 4,587

Re: rTorrent floods SYN packets on start

Most likely dht doing it's thing. Have you enabled dht in .rtorrent.rc?

Offline

#3 2012-05-07 14:28:53

aetherfly
Member
From: The SWAMP
Registered: 2010-08-01
Posts: 14
Website

Re: rTorrent floods SYN packets on start

I actually had it set to 'dht = disable' but I've also tried the default, which is 'off'. So, neither stops it. Is that normal behavior for dht or a torrent client in general?

Offline

#4 2012-05-07 14:41:25

aetherfly
Member
From: The SWAMP
Registered: 2010-08-01
Posts: 14
Website

Re: rTorrent floods SYN packets on start

I just moved all .torrent files and session data and that "fixed the problem". I'm still curious as to whether or not this is normal, I have rTorrent running through a proxy (if that matters). So, if anyone has any insight into why it does this, I'd appreciate it. I'm going to go through the torrent files one by one later to find which one{,s} {is,are} doing this, but I have to be off at the moment.

Offline

#5 2012-05-07 17:28:21

x33a
Forum Fellow
Registered: 2009-08-15
Posts: 4,587

Re: rTorrent floods SYN packets on start

Apparently resume also saves a list of peers, so maybe that is indeed the cause.

http://libtorrent.rakshasa.no/wiki/LibTorrentResume

Offline

#6 2012-05-09 18:39:35

pyroscope
Member
Registered: 2011-03-11
Posts: 33
Website

Re: rTorrent floods SYN packets on start

Wjhat it actually does is to do announce HTTP requests, within the limits set by your configuration. That involves establishing TCP connections, obviously.

Offline

Pages: 1

Board footer

Powered by FluxBB