Should I get suspicious?

limneos · 11 Mar 2009

I'm getting this every once in a while in Resource Monitor - Network . It happens a little while after I open an IE window.

Open the image and you'll understand what I mean. Is this normal???

limneos · 11 Mar 2009

I re-routed the domain mail.you-know-who.com in hosts file to 127.0.0.1 and now this is where it points

win7 · 12 Mar 2009

Interesting, yet another reason not to use IE... i wonder what its sending...??

YupYup · 12 Mar 2009

BTW Port 12080 is used in the IE connection settings for Avast Webshield .

Lordbob75 · 12 Mar 2009

<.<
>.>
This explains a lot actually......

~Lordbob

limneos · 12 Mar 2009

YupYup said:

BTW Port 12080 is used in the IE connection settings for Avast Webshield .

yes, indeed that's in the second screenshot. But what about the first? Used port 443...and not only. I checked the mail.m$.com sniff and it uses random target ports everytime

YupYup · 12 Mar 2009

limneos said:

yes, indeed that's in the second screenshot. But what about the first? Used port 443...and not only. I checked the mail.m$.com sniff and it uses random target ports everytime

port 443 is SSl so that would lead us too https://mail.microsoft.com

and the other ports are common to LDAP so it's likely it is being used to send performance data to microsoft.

limneos · 12 Mar 2009

With whose permission?
I can only think of the "Help windows to get better" option under Action Center

YupYup · 12 Mar 2009

limneos said:

With whose permission?
I can only think of the "Help windows to get better" option under Action Center

It was only a guess as to what it is being used for, but after more consideration i would have to say signing in to live would be a more rational explanation.

garysgold · 12 Mar 2009

I thought it was common knowledge that the beta is sending info to MS. Part of the EULA

4. INTERNET-BASED SERVICES. Microsoft provides Internet-based services with the software. It may change or cancel them at any time.
a. Consent for Internet-Based Services. Because this software is a pre-release version, we have turned on some internet-based features by default to obtain feedback about them.

It does say you can turn it all off further down.

Gary