In the first instance the port is 2013, which is with your range.
The port isn't visible in "plain text".
It takes the last two numbers (7 and 221) and converts them to binary (00000111 and 11011101). It then connects them to one long string (0000011111011101) and converts it back to "normal" numbers (2013).
The second is 00000111 + 11010100 = 0000011111010100 -> port 2004.
I'm not entirule sure this is right, so if anyone wants to correct me, go for it.
|