While this is here - anyone run netstat against it?

Post #195,108 by scoenye 2/17/05 6:06:47 AM Reply	While this is here - anyone run netstat against it? One of our MDs managed to install this at work. Everytime it is activated it continuously splatters the outgoing firewall with connections to seemingly arbitry IP addresses, using equally arbitrary high port numbers, even when set "offline". The IP addresses resolve to residential xDSL/cable accounts all over the planet. The generated traffic is fairly busy with a SYN packet being sent every few seconds. Up-to-date AV and spyware sweeps do not flag anything and the connection list has just two local people in it.
Post #195,114 by folkert 2/17/05 8:21:50 AM Reply	My guess, is this application... Has a feature of letting other Skype users know it is available. To those that are looking for random discussion... I'd guess this is what the "all around the world thing is going on" One other thing, I'll bet if you check you firewall it says Tons-O-machines are trying to verify that, or trying to update his client... If he has "please update me on who is available". Of course, this is just a guess, but I have dabbled quite a bit in H.323 and it is very chatty keeping up its end of the "connection". One other thing, you might wanna look and see if "keep alive" or some sort is checked on... that'd do it too. -- [link\|mailto:greg@gregfolkert.net\|greg], [link\|http://www.iwethey.org/ed_curry\|REMEMBER ED CURRY!] @ *i_wethey* [link\|http://it.slashdot.org/comments.pl?sid=134485&cid=11233230\|"Microsoft Security" is an even better oxymoron than "Miltary Intelligence"] No matter how much Microsoft supporters whine about how Linux and other operating systems have just as many bugs as their operating systems do, the bottom line is that the serious, gut-wrenching problems happen on Windows, not on Linux, not on Mac OS. -- [link\|http://www.eweek.com/article2/0,1759,1622086,00.asp\|source]
Post #195,183 by scoenye 2/17/05 2:01:18 PM Reply	One way only, but I think I know where it came from The hospital is in the final stages of becoming a separate entity. Until recently we were part of the social welfare dept. and we shared a connection to the internet. The connection was split almost overnight. While our own firewall was already in place, the www cache was not. As some MDs needed access for information, their PCs were configured to go straight to the firewall (ports 80 and 443). The Skype PC was one of those. According to Skype's firewall FAQ, they use 80 and 443 to sneak out calls if everything else is blocked. That explains how the machine would have been able to pick up knowledge of external Skype installations. The PC was recently reconfigured to go through the www cache, so I guess what we're seeing now is Skype going bonkers because it can't dial out anymore.
Post #195,141 by SpiceWare 2/17/05 10:14:54 AM Reply	peer-to-peer [link\|http://www.skype.com/products/explained.html\|Skype Explained] A true P2P system, in our opinion, is one where all nodes in a network join together dynamically to participate in traffic routing-, processing- and bandwidth intensive tasks that would otherwise be handled by central servers. Darrell Spice, Jr. [link\|http://spiceware.org/gallery/ArtisticOverpass\|Artistic Overpass]\n[link\|http://www.spiceware.org/\|SpiceWare] - We don't do Windows, it's too much of a chore

Welcome to IWETHEY!