Author Topic: high traffic and tcp connections  (Read 7602 times)

0 Members and 1 Guest are viewing this topic.

fomare

  • Guest
high traffic and tcp connections
« on: July 06, 2010, 11:50:13 AM »
Hi,
For 1 month, I found that the program maintains constant connections with remote addresses. Is this normal?
Thanks

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: high traffic and tcp connections
« Reply #1 on: July 06, 2010, 12:06:23 PM »
Hi,
For 1 month, I found that the program maintains constant connections with remote addresses. Is this normal?
Thanks

What do you mean exactly..? Please be more specific..!
I guess avast = the program..? But which avast? Where does it connect to constantly..?
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: high traffic and tcp connections
« Reply #2 on: July 06, 2010, 01:17:15 PM »
Aren't you referring to the web shield "connections"?
avast needs to scan the http traffic so you'll see "connections". In fact, it just scans the connections made by other programs (like a proxy behavior).
The best things in life are free.

Hermite15

  • Guest
Re: high traffic and tcp connections
« Reply #3 on: July 06, 2010, 01:18:43 PM »
he might also be referring to AvastUI connections ;D ...but let's wait for his answer. He's saying constant connections to remote addresses, ...which isn't the same as to say that something is connecting constantly. So chances are big it's not the web shield ;)
« Last Edit: July 06, 2010, 01:21:18 PM by Logos »

fomare

  • Guest
Re: high traffic and tcp connections
« Reply #4 on: July 06, 2010, 03:58:40 PM »
thank you all for your attention
if I run netstat-b, remote addresses are set by tcp ports with my ip address, and by 127.0.0.1:<port>, from avastsvc.exe.
Furthermore, also addresses such www: <port> are established by 127.0.0.1, unable to specify property.
Any ideas?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: high traffic and tcp connections
« Reply #5 on: July 06, 2010, 04:21:21 PM »
127.0.0.1 is localhost. Seems web shield scanning.
The best things in life are free.

Hermite15

  • Guest
Re: high traffic and tcp connections
« Reply #6 on: July 06, 2010, 04:32:10 PM »
thank you all for your attention
if I run netstat-b, remote addresses are set by tcp ports with my ip address, and by 127.0.0.1:<port>, from avastsvc.exe.
Furthermore, also addresses such www: <port> are established by 127.0.0.1, unable to specify property.
Any ideas?

okay so that's the web shield

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: high traffic and tcp connections
« Reply #7 on: July 06, 2010, 04:41:12 PM »
127.0.0.1 is localhost. Seems web shield scanning.

+1
avastsvc.exe listens to any traffic related to the shields (web/mail/p2p/etc...)
Nevertheless there should be no constant 'active'!! connection, if all net-related programs are closed.
It will still listen to the ports to catch any traffic, though...
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

fomare

  • Guest
Re: high traffic and tcp connections
« Reply #8 on: July 06, 2010, 06:19:52 PM »
127.0.0.1 is localhost. Seems web shield scanning.

+1
avastsvc.exe listens to any traffic related to the shields (web/mail/p2p/etc...)
Nevertheless there should be no constant 'active'!! connection, if all net-related programs are closed.
It will still listen to the ports to catch any traffic, though...
asyn


Indeed, if I were using iexplorer, it doesn't alert me for that. But with no open program or no operating, traffic is constant, and from the program with the local ip address to public Internet addresses. So I ask if the program requires constant access to the Internet to automatic scan files, or maybe I have a virus.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: high traffic and tcp connections
« Reply #9 on: July 06, 2010, 06:57:48 PM »
So I ask if the program requires constant access to the Internet to automatic scan files, or maybe I have a virus.

Yes, as the program acts like a local proxy.
All up/downloads will be scanned by the different avast shields...!
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: high traffic and tcp connections
« Reply #10 on: July 06, 2010, 07:02:58 PM »
Here's a sample, while being connected to the forum...
See screenshot..! (Sorry, it's german, but I guess you can still see, what it means..)
asyn
« Last Edit: July 06, 2010, 07:05:22 PM by Asyn »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0