EricRF

Bittorrent Sync Trying To Access Unfamiliar Ip Addresses

Recommended Posts

Hello...

 

Using Little Snitch on the Mac, I'm finding BitTorrent Sync is trying to connect regularly to unknown/unfamiliar IP addresses.  Why would this be?

 

Here are some of the IP addresses:

 

port 43611 of 162.253.128.167

port 43611 of 184.75.214.58

port 43611 of 216.15.114.189

port 43611 of 162.253.130.114

 

All are UDP ports.

 

Is this something to be concerned about?

 

Can anybody help?

 

Thanks!

 

-Eric

 

Share this post


Link to post
Share on other sites

@EricRF

 

When you see BTSync talking to some unknown IP addresses indicates that it communicates DHT network. Also, if you turn it on once for even a while - DHT network will remember your IP:port and still send some packets to you.

 

I suggest checking that DHT is off for all folders and changing listening port so DHT can't contact your peer anymore.

Share this post


Link to post
Share on other sites

@EricRF

 

When you see BTSync talking to some unknown IP addresses indicates that it communicates DHT network. Also, if you turn it on once for even a while - DHT network will remember your IP:port and still send some packets to you.

 

I suggest checking that DHT is off for all folders and changing listening port so DHT can't contact your peer anymore.

 

Thanks @RomanZ... but I don't have DHT on for any folders, and don't believe I ever did, since I don't even know what DHT stands for.

 

I'll try changing the listening port.

 

What exactly does "DHT" stand for?  What does it do?

 

Thanks for your reply!

 

-Eric

Share this post


Link to post
Share on other sites

Distributed Hash Table - Wikipedia entry

Ah, interesting!

 

I changed the listening port on BitTorrent Sync, and I'm still getting attempts to contact various IP addresses.  

 

The folders don't have DHT enabled.  The folder settings and BS's preference are attached.

 

Question: I'm seeing lots of cases of BS trying to contact lots of seemingly random (DHT?) IP addresses.  Is that a result of the DHT sites sending packets to BS on my machine, and BS trying to answer?  Or is BS reaching out all on its own?

 

In any case, it's still happening :huh:

 

Thanks for your help!

post-45614-0-91179100-1405958153_thumb.j

post-45614-0-44297200-1405958154_thumb.j

Share this post


Link to post
Share on other sites

@EricRF

 

When you turn off DHT, it still might response requests from other DHT nodes. However, it should not happen once you've changed the listening port.

 

Could you please send me a traffic capture? I'll analyze what kind of packets Sync is sending.

Share this post


Link to post
Share on other sites

@EricRF

 

When you turn off DHT, it still might response requests from other DHT nodes. However, it should not happen once you've changed the listening port.

 

Could you please send me a traffic capture? I'll analyze what kind of packets Sync is sending.

 Sure thing!  Where is that information logged?

 

Thanks!

Share this post


Link to post
Share on other sites

EricRF,

 

 

Where is that information logged?

 

In Little Snitcher, where you saw it. Capture Sync's traffic (Snitcher should save it as a .pcap file) and send it to syncapp@bittorrent.com. In the message, please, put link to this topic. 

 

I would also appreciate it if you mentioned your known peers and their IPs to exclude them from analysis. Thank you!

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.