Ask Your Question
0

Bittorrent packets

asked 2019-02-19 22:55:23 +0000

FM gravatar image

Good day everyone! I am new on Wireshark and this question may be silly but...

I have been analyzing my network traffic for a few days, and today I found the presence of many Bittorrent packets. I have never seen Bittorrent packets in my network traffic. What worries me is that I do not even have Bittorrent installed in my PC! Can the presence of Bittorrent packets in the network traffic be a sign of malicious activity? Can you give me some suggestions on how I can check out the reasons of the Bittorrent packets in my traffic?

Thank you

edit retag flag offensive close merge delete
add a comment

1 Answer

Sort by » oldest newest most voted
0

answered 2019-02-20 05:22:04 +0000

Packet_vlad gravatar image

updated 2019-02-20 07:26:23 +0000

You have to track down which application is sending these packets. Spot ports and transport protocol (TCP or UDP). Then download Sysinternals toolkit from Microsoft site. Procmon utility will help you to correlate traffic with process name.

It can be malicious or not.

It often happens different software uses Bittorent protocol for delivering updates. I've observed this for online games clients.

edit flag offensive delete link more

Comments

Большое спасибо за вашу помощь! Так и сделаю.

Many thanks for your help. I will follow your advice.

FM gravatar imageFM ( 2019-02-20 22:24:41 +0000 )edit
1

FM,

You didn't specify what OS you are using, assuming it's Windows 10 you may want to take a look at this post.

https://www.geek.com/apps/windows-10-lets-you-torrent-updates-and-apps-1618036/

net_tech gravatar imagenet_tech ( 2019-02-21 00:33:22 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2019-02-19 22:55:23 +0000

Seen: 1,009 times

Last updated: Feb 20 '19