First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Bittorrent packets

  • retag add tags

Good day everyone! I am new on Wireshark and this question may be silly but...

I have been analyzing my network traffic for a few days, and today I found the presence of many Bittorrent packets. I have never seen Bittorrent packets in my network traffic. What worries me is that I do not even have Bittorrent installed in my PC! Can the presence of Bittorrent packets in the network traffic be a sign of malicious activity? Can you give me some suggestions on how I can check out the reasons of the Bittorrent packets in my traffic?

Thank you

FM's avatar
1
FM
asked 2019-02-19 22:55:23 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

You have to track down which application is sending these packets. Spot ports and transport protocol (TCP or UDP). Then download Sysinternals toolkit from Microsoft site. Procmon utility will help you to correlate traffic with process name.

It can be malicious or not.

It often happens different software uses Bittorent protocol for delivering updates. I've observed this for online games clients.

Packet_vlad's avatar
1.1k
Packet_vlad
answered 2019-02-20 05:22:04 +0000, updated 2019-02-20 07:26:23 +0000
edit flag offensive 0 remove flag delete link

Comments

Большое спасибо за вашу помощь! Так и сделаю.

Many thanks for your help. I will follow your advice.

FM's avatar FM (2019-02-20 22:24:41 +0000) edit
1

FM,

You didn't specify what OS you are using, assuming it's Windows 10 you may want to take a look at this post.

https://www.geek.com/apps/windows-10-lets-you-torrent-updates-and-apps-1618036/

net_tech's avatar net_tech (2019-02-21 00:33:22 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer