09-21-2010 07:49 AM
To understand better the comunications on the net I created a rules in Norton to monitor any activity on the net.
Norton registers then a message when VLC starts that I do not understand completely:
Rule:"All access new Firewall Rule" monitored traffic(fec0:00:00:ffff::01,Port(53)).
Local address, service is( ::0,Port (0)).
Remote address, service is(fec0:00:00:ffff::01,Port(53)).
Process name is "c:\Program Files\VideoLAN\VLC\vlc.exe".
I am asking first of all if it is normal. And then the meaning of these address and if the address are all internal to my computer and from which process, or if there could be same strange underground process the is activated by VLC that could communicate in internet.
Many Thanks for any informations
09-21-2010 08:29 AM
as I know VLC Player checks for update during its startup. I think you see this process.
Windows 8.1 Embedded Industry Pro x64 Hungarian, Norton 360 v188.8.131.52
09-21-2010 10:40 AM
You shouldn't even use that version anymore. The latest is v. 1.1.4 It was updated by the Videolan group to this version with regard to the dll exploit of some days ago. The version you're using is obsoleted and vulnerable.
09-21-2010 03:26 PM
Thank You very much to everybody, I will update VLC.
To avoid strange communications from programs that do not have need to communicate in internet like VLC in my installations I have introduced a rule in Norton to block any communications from/to this program. I am asking now if this rule apply also to the dll that VLC load and use ? Or have I to block explicitly these dll ? ( The questions is naturally valid for any other program)
09-23-2010 09:52 AM
PaoloMO, I suspect that the reason you asked about this was because the addressses didn't look 'normal'. VLC is apparently an IPv6 enabled application and is doing DNS lookup via IPv6. The addresses with colons (:) are IPv6 addresses.