Where does your browser call to?

[jwoegerbauer]

Ever wanted to know this? Then here a short guide to find this out:

What you need:

Network monitoring program "WireShark"
DL:

Optional: WireShark's online analysis tool


What you do:

1. Install WireShark (either 32-bit or 64-bit version, depends on your computer - system will be re-bootet)

2. Start Wireshark
In its "Interface List"
-> Check the device/interface you want to be examined, eg. WIFI
-> Start

3. Start your browser
-> Navigate to Austech.info
Wait at least until site Austech.info has completely loaded, better of course 1 minute to be on the safe side

4. In WireShark's menu bar run

Capture -> Stop
optional: File -> Saveas -> CurrentBrowser (file by default will be stored in My Documents)
Analyze -> Display Filers -> HTTP

5. In the window now shown to you only columns "Source" and "Destination" are of interest to see which server contacted another server: You simply enter in Google-Search the IP displayed in one of the columns. Note that IPs starting with 198.168.178 is your router/modem and/or your computer.

[autotuner]

A quick but less sophisticated way without installing anything uses the Windows netstat command.
Open a DOS windows and type in netstat /? for all the options, but netstat -f will give you a good idea of where you are connected to....

[Bigfella237]

Hmm... so why do I have all these URLs listed that I never visit?

facebook.com
amazonaws.com
twttr.com
etc.

I don't even have accounts with any of them?

Andrew

[autotuner]

Well, that's the point of looking. Sites will link you off to lots of places you don't ask for.

[Philquad]

mine go to
youporn.com
redtube.com
tube8.com
i cant work out why?
seriously though
go look up a tv on hardly normal website
then go to this site
i bet theres a hardly normal ad up the top lol
its called cookies

[jwoegerbauer]

Forgot to add this listing to my 1st post here, which is an excerpt of network trafic given if you visit AUSTECH



» firefox browser startet, navigated to AUSTECH

COMPUTER 192.168.178.28 -> 54.251.175.78 AMAZON WEB SERVICES
AMAZON WEB SERVICES 54.251.175.78 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 173.194.70.139 GOOGLE
GOOGLE 173.194.70.139 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 67.215.236.156 AUSTECH
AUSTECH 67.215.236.156 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 173.194.70.95 GOOGLE
GOOGLE 173.194.70.95 -> 192.168.178.28 COMPUTER
AUSTECH 67.215.236.156 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 67.215.236.156 AUSTECH
COMPUTER 192.168.178.28 -> 173.194.70.93 GOOGLE
GOOGLE 173.194.70.93 -> 192.168.178.28 COMPUTER
AUSTECH 67.215.236.156 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 67.215.236.156 AUSTECH
COMPUTER 192.168.178.28 -> 173.194.70.95 GOOGLE
GOOGLE 173.194.70.95 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 173.194.70.95 GOOGLE
GOOGLE 173.194.69.106 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 173.194.69.106 GOOGLE
AUSTECH 67.215.236.156 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 67.215.236.156 AUSTECH
AUSTECH 67.215.236.156 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 67.215.236.156 AUSTECH
AUSTECH 67.215.236.156 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 67.215.236.156 AUSTECH
AUSTECH 67.215.236.156 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 67.215.236.156 AUSTECH

» here austech seems to be completely loaded !!!
» but further activities are going on ...

COMPUTER 192.168.178.28 -> 173.194.70.93 GOOGLE
GOOGLE 173.194.70.93 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 173.194.70.95 GOOGLE
GOOGLE 173.194.69.106 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 239.255.255.250 COMPUTER[WINDOWS OS]
GOOGLE 173.194.69.106 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 239.255.255.250 COMPUTER[WINDOWS OS]
COMPUTER 192.168.178.28 -> 173.194.69.106 GOOGLE
GOOGLE 173.194.69.106 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 2.16.218.193 AKAMAI
COMPUTER 192.168.178.28 -> 2.16.218.193 AKAMAI
COMPUTER 192.168.178.28 -> 2.16.218.193 AKAMAI
AKAMAI 2.16.218.193 -> 192.168.178.28 COMPUTER
AKAMAI 2.16.218.193 -> 192.168.178.28 COMPUTER
AKAMAI 2.16.218.193 -> 192.168.178.28 COMPUTER
COMPUTER 192.168.178.28 -> 2.16.218.208 AKAMAI
AKAMAI 2.16.218.208 -> 192.168.178.28 COMPUTER

» etc pp



EDIT:

239.255.255.250 (UDP, port 1900) is the MCAST address, used by local UPnP to search/find further UPnP-compatible devices in local network

[jwoegerbauer]

its called cookies

Yes, a network connection can be based on a cookie or some type of data that’s stored on the computer (client). A cookie can be used to compromise your privacy if someone (host) gained access to your computer. That's the reason why I have - since I can remember - disabled cookies in my browser.