topic Re: What ports does a forwarder bind to for sending data? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/What-ports-does-a-forwarder-bind-to-for-sending-data/m-p/73860#M15123 <P>'randomly' is a little unfair. The OS will choose an ephemeral port number and use that. How the OS determines the ephemeral port is OS dependent and also is related to how many ephemeral ports have been used so far. On Linux the ephemeral port range is controlled by the sysctl net.ipv4.ip_local_port_range, and on Windows it's a registry setting.</P> Mon, 28 Sep 2020 09:19:27 GMT dwaddle 2020-09-28T09:19:27Z What ports does a forwarder bind to for sending data? https://community.splunk.com/t5/Getting-Data-In/What-ports-does-a-forwarder-bind-to-for-sending-data/m-p/73858#M15121 <P>I'm trying to determine the port range that a forwarder uses as it's source port. Assuming I'm reading $SPLUNK_HOME/var/log/splunk/metrics.log correctly, I'm seeing data sourced from ports in the 30,000 and 50,000 range.</P> <P>Is this something I can specify when configuring a forwarder?</P> Wed, 20 Oct 2010 22:30:36 GMT https://community.splunk.com/t5/Getting-Data-In/What-ports-does-a-forwarder-bind-to-for-sending-data/m-p/73858#M15121 CarlS 2010-10-20T22:30:36Z Re: What ports does a forwarder bind to for sending data? https://community.splunk.com/t5/Getting-Data-In/What-ports-does-a-forwarder-bind-to-for-sending-data/m-p/73859#M15122 <P>I do not believe you can configure the port setting for the port range that a forwarder uses as it's source. If I recall correctly, this is randomly determined by the OS. </P> Wed, 20 Oct 2010 22:39:24 GMT https://community.splunk.com/t5/Getting-Data-In/What-ports-does-a-forwarder-bind-to-for-sending-data/m-p/73859#M15122 Simeon 2010-10-20T22:39:24Z Re: What ports does a forwarder bind to for sending data? https://community.splunk.com/t5/Getting-Data-In/What-ports-does-a-forwarder-bind-to-for-sending-data/m-p/73860#M15123 <P>'randomly' is a little unfair. The OS will choose an ephemeral port number and use that. How the OS determines the ephemeral port is OS dependent and also is related to how many ephemeral ports have been used so far. On Linux the ephemeral port range is controlled by the sysctl net.ipv4.ip_local_port_range, and on Windows it's a registry setting.</P> Mon, 28 Sep 2020 09:19:27 GMT https://community.splunk.com/t5/Getting-Data-In/What-ports-does-a-forwarder-bind-to-for-sending-data/m-p/73860#M15123 dwaddle 2020-09-28T09:19:27Z