why would a mirror want to hit port 5949 or 15076?