Not what you were looking for? Ask our experts!
Reply
Regular Visitor
PaoloMO
Posts: 6
Registered: ‎09-15-2010

VLC multimedia 1.0.3 messages in History files

To understand better the comunications on the net I created a rules in Norton to monitor any activity on the net.

Norton registers then a message when VLC starts that I do not understand completely:

 

Rule:"All access new Firewall Rule" monitored traffic(fec0:00:00:ffff::01,Port(53)).

Local address, service is( ::0,Port (0)).

Remote address, service is(fec0:00:00:ffff::01,Port(53)).

Process name is "c:\Program Files\VideoLAN\VLC\vlc.exe".

 

I am asking first of all  if it is normal.  And then  the meaning of these address and if  the address are all internal to my computer  and from which process, or if there could be same strange underground process the is activated by VLC that could communicate  in internet.

Many Thanks for any informations

 

PapauZ
Posts: 6,792
Topics: 392
Kudos: 1,025
Solutions: 374
Registered: ‎04-08-2008

Re: VLC multimedia 1.0.3 messages in History files

Hi,

 

as I know VLC Player checks for update during its startup. I think you see this process.


Windows 8.1 Embedded Industry Pro x64 Hungarian, Norton 360 v21.3.0.12

TomiRed
Posts: 908
Topics: 86
Kudos: 161
Solutions: 27
Registered: ‎06-19-2008

Re: VLC multimedia 1.0.3 messages in History files

Port 53 is used for Domain Name System..

Windows 7 Ultimate x64 SP1 -- NIS 21
Contributor
manuelFT
Posts: 44
Registered: ‎09-14-2010

Re: VLC multimedia 1.0.3 messages in History files

You shouldn't even use that version anymore. The latest is v. 1.1.4 It was updated by the Videolan group to this version with regard to the dll exploit of some days ago. The version you're using is obsoleted and vulnerable.

Contributor
manuelFT
Posts: 44
Registered: ‎09-14-2010

Re: VLC multimedia 1.0.3 messages in History files

Oh, BTW: this document:

http://www.videolan.org/security/sa1005.html

explains it all.

 

Regular Visitor
PaoloMO
Posts: 6
Registered: ‎09-15-2010

Re: VLC multimedia 1.0.3 messages in History files

Thank You very much to everybody,  I will update VLC.

 

To avoid strange communications from programs that do not have need to communicate in internet like VLC in my installations I have introduced a rule  in Norton to block any communications from/to  this program.  I am asking now if this rule apply also to the dll that VLC  load and use ?   Or have I  to block explicitly  these dll  ?  ( The questions is naturally valid for any other program)

Thank You

Symantec Employee
reese_anschultz
Posts: 2,562
Registered: ‎04-08-2008

Re: VLC multimedia 1.0.3 messages in History files

PaoloMO, I suspect that the reason you asked about this was because the addressses didn't look 'normal'. VLC is apparently an IPv6 enabled application and is doing DNS lookup via IPv6. The addresses with colons (:) are IPv6 addresses.

Reese Anschultz
Senior Software Quality Assurance Manager, Symantec Corporation