DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Author Topic: Unknown packet  (Read 6,508 times)

rgdot

  • Supporting Member
  • Joined in 2009
  • **
  • Posts: 2,197
Unknown packet
« on: April 06, 2017, 02:28 PM »
Hope someone here can help decipher something, I randomly ran Nirsoft's smartsniff on this laptop I am now, just as a security measure of sorts to check it. One of the captured packets is odd, to me at least.

Code: (text)
==================================================
Index             : 1
Protocol          : TCP
Local Address     : 192.168.0.126
Remote Address    : 90.181.227.232
Local Port        : 50321
Remote Port       : 443
Local Host        : 
Remote Host       : 
Service Name      : https
Packets           : 2
Data Size         : 1 Bytes
Total Size        : 134 Bytes
Data Speed        : 0.0 KB/Sec
Capture Time      : 2017-04-04 11:33:30 AM:061
Last Packet Time  : 2017-04-04 11:33:30 AM:279
Duration          : 00:00:00.218
Local MAC Address : 
Remote MAC Address: 
Local IP Country  : 
Remote IP Country : 
==================================================

00000000  00   

Just that 00000000 00 randomly once in a while when I leave smartsniff running, to that IP or others that my look up says "Organization: O2 Czech Republic iol.cz"

Any thoughts?

mwb1100

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 1,645
Re: Unknown packet
« Reply #1 on: April 06, 2017, 06:37 PM »
A reverse DNS on 90.181.227.232 resolves to a site in the nos-avg.cz domain.

That has something to do with AVG (the antivirus company).  You might want to ask them about it, or try turning off any automatic update functionality for a while and see if it stops.

rgdot

  • Supporting Member
  • Joined in 2009
  • **
  • Posts: 2,197
Re: Unknown packet
« Reply #2 on: April 06, 2017, 06:59 PM »
The site I used didn't show the avg domain, only iol.cz. Wasted my time and yours :( Thanks. Will deal with the blocking (or not blocking)
Incidentally Avast is installed and this reminds me Avast bought AVG a while back...

app103

  • That scary taskbar girl
  • Global Moderator
  • Joined in 2006
  • *****
  • Posts: 5,888
    • Participated in NANY Challenge Six Times
    • Coding Snacks
    • Gathering Badge
    • Cody Award
    • Volunteers/Staff
Re: Unknown packet
« Reply #3 on: April 06, 2017, 08:08 PM »
Yup, he's right...AVG.

From a handy little FF add-on that I use for tracing customer IP addresses, at work.

Screenshot - 4_6_2017 , 4_04_05 PM.png

app103

  • That scary taskbar girl
  • Global Moderator
  • Joined in 2006
  • *****
  • Posts: 5,888
    • Participated in NANY Challenge Six Times
    • Coding Snacks
    • Gathering Badge
    • Cody Award
    • Volunteers/Staff
Re: Unknown packet
« Reply #4 on: April 06, 2017, 08:24 PM »
It could possibly be related to a browser security add-on.

https://support.avg.com/answers?id=906b0000000DPSPAA4

rgdot

  • Supporting Member
  • Joined in 2009
  • **
  • Posts: 2,197
Re: Unknown packet
« Reply #5 on: April 06, 2017, 09:57 PM »
Thanks app, I should have done more before asking  :-[

Original address: https://www.donationcoder.com/forum/index.php?topic=43691.0