Right you were about the registered port. There was a properties file with the info in it.
It definitely looks to be talking fine.
| 39 | 3.325556000 | 192.168.1.167 | 192.168.1.14 | TCP | 66 | shell > 55389 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 SACK_PERM=1 WS=128 |
Transmission Control Protocol, Src Port: shell (514), Dst Port: 55389 (55389), Seq: 0, Ack: 1, Len: 0
| 40 | 3.325629000 | 192.168.1.14 | 192.168.1.167 | TCP | 54 | 55389 > shell [ACK] Seq=1 Ack=1 Win=65536 Len=0 |
Transmission Control Protocol, Src Port: 55389 (55389), Dst Port: shell (514), Seq: 1, Ack: 1, Len: 0
| 41 | 3.325910000 | 192.168.1.14 | 192.168.1.167 | RSH | 107 | Client -> Server data |
Transmission Control Protocol, Src Port: 55389 (55389), Dst Port: shell (514), Seq: 1, Ack: 1, Len: 53
0000 3c 31 33 34 3e 4a 75 6e 20 32 37 20 31 37 3a 33 <134>Jun 27 17:3
0010 36 3a 32 34 20 31 37 32 2e 32 30 2e 30 2e 31 34 6:24 192.168.1.14
0020 20 54 45 3a 20 54 65 73 74 20 43 6f 6e 6e 65 63 TE: Test Connec
0030 74 69 6f 6e 0a tion.
| 42 | 3.528329000 | 192.168.1.167 | 192.168.1.14 | TCP | 60 | shell > 55389 [ACK] Seq=1 Ack=54 Win=14720 Len=0 |
Transmission Control Protocol, Src Port: shell (514), Dst Port: 55389 (55389), Seq: 1, Ack: 54, Len: 0
| 46 | 4.960854000 | 192.168.1.14 | 192.168.1.167 | TCP | 54 | 55389 > shell [FIN, ACK] Seq=54 Ack=1 Win=65536 Len=0 |
I guess I'll have to dig through the TW manual to see about a debugging option for the default syslog.
Thanks for the help.