• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs

Not what you are looking for? Ask the experts!

Kudos0

VLC multimedia 1.0.3 messages in History files

To understand better the comunications on the net I created a rules in Norton to monitor any activity on the net.

Norton registers then a message when VLC starts that I do not understand completely:

Rule:"All access new Firewall Rule" monitored traffic(fec0:00:00:ffff::01,Port(53)).

Local address, service is( ::0,Port (0)).

Remote address, service is(fec0:00:00:ffff::01,Port(53)).

Process name is "c:\Program Files\VideoLAN\VLC\vlc.exe".

I am asking first of all  if it is normal.  And then  the meaning of these address and if  the address are all internal to my computer  and from which process, or if there could be same strange underground process the is activated by VLC that could communicate  in internet.

Many Thanks for any informations

Replies

Kudos0

Re: VLC multimedia 1.0.3 messages in History files

Hi,

as I know VLC Player checks for update during its startup. I think you see this process.

Windows 8.1 Embedded Industry Pro x64 Hungarian, Norton 360 v21.5.0.19
Kudos0

Re: VLC multimedia 1.0.3 messages in History files

Port 53 is used for Domain Name System..

Windows 7 Ultimate x64 SP1 -- NIS 21
Kudos0

Re: VLC multimedia 1.0.3 messages in History files

You shouldn't even use that version anymore. The latest is v. 1.1.4 It was updated by the Videolan group to this version with regard to the dll exploit of some days ago. The version you're using is obsoleted and vulnerable.

Kudos0

Re: VLC multimedia 1.0.3 messages in History files

Oh, BTW: this document:

http://www.videolan.org/security/sa1005.html

explains it all.

Kudos0

Re: VLC multimedia 1.0.3 messages in History files

Thank You very much to everybody,  I will update VLC.

To avoid strange communications from programs that do not have need to communicate in internet like VLC in my installations I have introduced a rule  in Norton to block any communications from/to  this program.  I am asking now if this rule apply also to the dll that VLC  load and use ?   Or have I  to block explicitly  these dll  ?  ( The questions is naturally valid for any other program)

Thank You

Kudos0

Re: VLC multimedia 1.0.3 messages in History files

PaoloMO, I suspect that the reason you asked about this was because the addressses didn't look 'normal'. VLC is apparently an IPv6 enabled application and is doing DNS lookup via IPv6. The addresses with colons (:) are IPv6 addresses.

Reese AnschultzSenior Software Quality Assurance Manager, Symantec Corporation

Replies are locked for this thread.