Did you try Christoph's suggestion while there was an established connection? Are you able to catch when the connection is made? If you still receive the logs and browsers are closed, it would lead me to believe it would be another source making the connection. What does TCPView show on the machine?
http://technet.microsoft.com/en-us/sysinternals/bb897437.aspx -- Michael D. Wood www.itsecuritypros.org -----Original Message----- From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of k_o_l Sent: Monday, March 25, 2013 4:53 PM To: 'pfSense support and discussion' Subject: Re: [pfSense] General question From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of Christoph Hanle Sent: Monday, March 25, 2013 2:45 PM To: list@lists.pfsense.org Subject: Re: [pfSense] General question On 25.03.2013 19:30 k_o_l wrote: > > I see the issue even when all browser are shut down. > netstat -ano (Win) or -nlp on the source PC can bring you the solution. bye Christoph -----Original Message----- Nothing there, wireshark captures http sessions, but not sure what doing it since all my browsers are off. _______________________________________________ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list _______________________________________________ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
