Bittorrent Sync Trying To Access Unfamiliar Ip Addresses

[EricRF]

Hello...

 

Using Little Snitch on the Mac, I'm finding BitTorrent Sync is trying to connect regularly to unknown/unfamiliar IP addresses.  Why would this be?

 

Here are some of the IP addresses:

 

port 43611 of 162.253.128.167

port 43611 of 184.75.214.58

port 43611 of 216.15.114.189

port 43611 of 162.253.130.114

 

All are UDP ports.

 

Is this something to be concerned about?

 

Can anybody help?

 

Thanks!

 

-Eric

 

[GreatMarko]

Turn off "Search DHT Network" (this is a per-folder setting)

[EricRF]

Turn off "Search DHT Network" (this is a per-folder setting)

 

Thanks for the suggestion, Marko, but it wasn't on to begin with

[RomanZ]

@EricRF

 

When you see BTSync talking to some unknown IP addresses indicates that it communicates DHT network. Also, if you turn it on once for even a while - DHT network will remember your IP:port and still send some packets to you.

 

I suggest checking that DHT is off for all folders and changing listening port so DHT can't contact your peer anymore.

[EricRF]

@EricRF

 

When you see BTSync talking to some unknown IP addresses indicates that it communicates DHT network. Also, if you turn it on once for even a while - DHT network will remember your IP:port and still send some packets to you.

 

I suggest checking that DHT is off for all folders and changing listening port so DHT can't contact your peer anymore.

 

Thanks @RomanZ... but I don't have DHT on for any folders, and don't believe I ever did, since I don't even know what DHT stands for.

 

I'll try changing the listening port.

 

What exactly does "DHT" stand for?  What does it do?

 

Thanks for your reply!

 

-Eric

[GreatMarko]

What exactly does "DHT" stand for?  What does it do?

 

Distributed Hash Table - Wikipedia entry

[EricRF]

Distributed Hash Table - Wikipedia entry

Ah, interesting!

 

I changed the listening port on BitTorrent Sync, and I'm still getting attempts to contact various IP addresses.  

 

The folders don't have DHT enabled.  The folder settings and BS's preference are attached.

 

Question: I'm seeing lots of cases of BS trying to contact lots of seemingly random (DHT?) IP addresses.  Is that a result of the DHT sites sending packets to BS on my machine, and BS trying to answer?  Or is BS reaching out all on its own?

 

In any case, it's still happening

 

Thanks for your help!

[RomanZ]

@EricRF

 

When you turn off DHT, it still might response requests from other DHT nodes. However, it should not happen once you've changed the listening port.

 

Could you please send me a traffic capture? I'll analyze what kind of packets Sync is sending.

[EricRF]

@EricRF

 

When you turn off DHT, it still might response requests from other DHT nodes. However, it should not happen once you've changed the listening port.

 

Could you please send me a traffic capture? I'll analyze what kind of packets Sync is sending.

 Sure thing!  Where is that information logged?

 

Thanks!

[Helen]

EricRF,

 

 

Where is that information logged?

 

In Little Snitcher, where you saw it. Capture Sync's traffic (Snitcher should save it as a .pcap file) and send it to syncapp@bittorrent.com. In the message, please, put link to this topic. 

 

I would also appreciate it if you mentioned your known peers and their IPs to exclude them from analysis. Thank you!