CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 937
Comments: 25
block bottom
spacer spacer

Jittr Networks keeps attempting to send me packets..

 
Post new topic   Reply to topic       All -> FavForums -> Zone Alarm [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
BLAZE86

Corporal
Corporal


Joined: Jun 14, 2006
Posts: 66
Location: USA

PostPosted: Thu Feb 21, 2008 12:29 pm    Post subject: Jittr Networks keeps attempting to send me packets..
Reply with quote

After my daily video game news trolling.. I came upon a new game trailer at http://www.gametrailers.com/game/6237.html. Upon going to there main site to check it out.. I thought it looked pretty cool, and I like to know what games are using what graphics engine etc.. In this case this game is using Unreal 3 Engine. Which is fairly new.

Its a very good engine graphics wise, so I was like ok kewl. They have a really small site atm for this game. They have a until now, was a unknown web browser video player plugin called Jittr. There located in CA I believe. There was a trailer on there home page, along with a few other trailers using this web video player plugin jittr. After I watched the video I was like ok kewl.. cya.

I uninstalled jittr and stuff because I have a habit of looking in task manager to see whats up. and I noticed Jm.exe and jittr.exe runing.. so I uninstalled jittr. But noticed in my ZONEALARM firewall log viewer that I keep geting sent packets from Jittr 2 different IP's, one is overlay, and one is warp. I have no idea why they keep sending me packets atm. My ZONEALARM keeps blocking them. I uninstalled there stuff so.. wth? I emailed them, along with this game thats using this video player asking wtf pretty much..

Anyone have any ideas why they would be attempting to send me packets ever 30sec's even thou I uninstalled there stuff?

http://img20.imageshack.us/img20/2930/image1bt6.jpg

Back to top
View users profile Send private message
mmoney

Cadet
Cadet


Joined: Feb 22, 2008
Posts: 4
Location: USA

PostPosted: Fri Feb 22, 2008 11:59 am    Post subject:
Reply with quote

jittr networks offers a hd video streaming service. The program that was running had open connections because it works kind of like a learning network does informing itself of servers going up or down, load and other things that can help quality of service.
It's strange that you would see connects even though you unistalled the service. It could be your firewall was keeping ports open or that the connections didn't time out yet.
I'll inform jittr so they can try and fix it.

Back to top
View users profile Send private message
BLAZE86

Guest
IP: 76.23.*.*






PostPosted: Sat Feb 23, 2008 4:58 am    Post subject:
Reply with quote

I emailed them also.. at info@jittr.net basicly asking about this.. and wtf? heh

Back to top
BLAZE86

Guest
IP: 76.23.*.*






PostPosted: Sat Feb 23, 2008 5:03 am    Post subject:
Reply with quote

They still have yet to reply.. I sent my emails like 2 days ago, and I'm also still blocking packets from them every 30 seconds to a minute.

Back to top
BLAZE86

Corporal
Corporal


Joined: Jun 14, 2006
Posts: 66
Location: USA

PostPosted: Sat Feb 23, 2008 5:13 am    Post subject:
Reply with quote

They must not be monitoring there own programs / assets I guess, because everyone knows that a good standing respectful company replys to emails within 24 hours..

And adding to that.. because there sending packets like this recklessly, they could possibly end up with a lawsuit against them. These packets replicate, and impersonate clearly a attempt to break ones internet security FYI.

Just my opinion of coarse..

Back to top
View users profile Send private message
mmoney

Cadet
Cadet


Joined: Feb 22, 2008
Posts: 4
Location: USA

PostPosted: Sat Feb 23, 2008 7:51 am    Post subject:
Reply with quote

They got back to me and confirmed within a few hours my understanding it's what was posted before info sent to jittr service is to help QoS of the video streaming network server’s being up or down, load info. I had met one of them awhile ago one of their engineers is a security buf.

if you’re getting it still after a few days all that means is that you didn't uninstall the program. I tried the site video worked great and then went off the site and the connections went to one within two minutes. Then I uninstalled the jittr software and the connections stopped within about 20 seconds. I think it's pretty clear you didn't uninstall or you have what is called a non passive firewall that keeps ports going and communication going post connections being there.

Hah As far as hacking and lawsuit against them for a packet being sent that is completely ridiculous. How is a packet == hacking? Do you even know what hacking is? Don’t be such a n00b
I've worked with the fbi in the past on the topic of security and internet immunology(virii). I also have worked at several antivirus companies. Spent quite a few years in academia researching these topics as well.
I'll fill you in straight who ever told you blocking your ports is good security mislead you and who ever told you monitoring packets and IP addys constantly was a good habit to be in is more paranoid than SPAWAR and probably isn't worth their lick in the security world.

If you really want the best security on earth turn your computer off lock it in a safe and burry it.

it's really gonna freak you out when you find out google, yahoo and doubleclick follow you around the internet and have a psychological profile on you. They serve ads to you based on this info by tracking your IP. I’d get a kick to find out what your response is to that…? stun gun Larry Page?

Back to top
View users profile Send private message
BLAZE86

Corporal
Corporal


Joined: Jun 14, 2006
Posts: 66
Location: USA

PostPosted: Sat Feb 23, 2008 8:36 am    Post subject:
Reply with quote

I'm just easily paranoid yo, don't take offense.

FYI http://www.straferight.com/forums/game-industry-buzz-rumors/176263-internet-terrorism-internet-backbones-going-down.html

Back to top
View users profile Send private message
BLAZE86

Corporal
Corporal


Joined: Jun 14, 2006
Posts: 66
Location: USA

PostPosted: Sat Feb 23, 2008 8:38 am    Post subject:
Reply with quote

Could you possibly help me close those connections that are posting?

P.S. If you want some psychological profile about me, just take this into account.. If I notice that all our backbones (USA's entire Internet) are down, or going down.. and also on the weekend, our country is more vulnerable then on weekdays.. believe me.

+ Bad weather makes me even more paranoid.. because it just makes us that more vulnerable.

This is alittle off topic to jittr.. but Jittr isn't really a big deal.

And no.. You can't know what career path I've walked.

With world wide current events and the state that its in atm.. Is briefly hidden from the people.. Common sense though tells me to look deeper.

I've seen People get $9 million just because a health care company dropped someone who got cancer right when they were getting radiation treatment.

My mother wasn't so lucky in a similar case..

Back to top
View users profile Send private message
mmoney

Cadet
Cadet


Joined: Feb 22, 2008
Posts: 4
Location: USA

PostPosted: Sat Feb 23, 2008 8:52 am    Post subject:
Reply with quote

sorry man I didn't mean to come off hostile you know how it is with things when you do it every day, like i do security, sometimes you forget that not everyone does it and thinks its obvious.

I just went to the control panel and uninstalled the software. If your firewall is non passive tho you might try restarting it. Some act like firewall and intrusion prevention systems that keep ports open to monitor activity. i've even run into some that try to do learning based on traffic paterns not sure what zone alarm is doing.

but yeah if a prog what blinking all the time and telling me some prog was causeing connects i'd prob be like wtf too... that's why i don't use them or i turn that feature off.

but honestly I hardly use even a virus scanner i just go to windows update and make sure its always updated. I haven't gotten a virus on my system in about 10 years.

Back to top
View users profile Send private message
BLAZE86

Corporal
Corporal


Joined: Jun 14, 2006
Posts: 66
Location: USA

PostPosted: Sat Feb 23, 2008 8:56 am    Post subject:
Reply with quote

Yea getting viruses is mostly related to your own internet surfing habits.. So I don't have to worry about this?

http://img505.imageshack.us/img505/2759/56dq7.jpg
http://img505.imageshack.us/img505/792/563os6.jpg

Back to top
View users profile Send private message
mmoney

Cadet
Cadet


Joined: Feb 22, 2008
Posts: 4
Location: USA

PostPosted: Sat Feb 23, 2008 9:05 am    Post subject:
Reply with quote

no you shouldn't worry i talked to one of the engineers once about that... met him at GDC and he sent me a link to their showcase. I literally saw some of the best streaming HD video in my life at their site but had noticed wierd connections too. He said that the network teaches itself about problems so the connections are the network and if a server is under heavy load it tells the network if servers go up or down the network is notified so the network basically always knows what is the best way to deliver the video all the time. it's pretty futuristic that's why i was so interested to find out who their customers were cause i've never heard of anything like that. I am guessing that is what those connections are all about. I'd just ignore/ or accept all connects on that port and forget about it but honestly I just uninstalled again and i'm not seeing any connect backs from warp*.jittr.net.

i'll ping that engineer and let them know they might have a bug with zone alarm or some kinda conflict i will let you know what he says and tell him you email them on info@jittr

Back to top
View users profile Send private message
BLAZE86

Corporal
Corporal


Joined: Jun 14, 2006
Posts: 66
Location: USA

PostPosted: Sat Feb 23, 2008 9:08 am    Post subject:
Reply with quote

Yea.. I emailed them.. I don't think I said anything to offense them.. hopefully heh

Thanks for the help, and quick responses, I really appreciated it. Very Happy

I emailed them like 2 days ago that is.. heh I hope they don't get mad or anything.

Cya yo, I gotta hit the pillow..

Back to top
View users profile Send private message
BLAZE86

Corporal
Corporal


Joined: Jun 14, 2006
Posts: 66
Location: USA

PostPosted: Sat Feb 23, 2008 1:55 pm    Post subject:
Reply with quote

Here's a tracert done by me to jittr's blocked packets sent to me..

Perhaps the internet itself is to blame?

I'm not sure who 64.215.24.86 and 85 are.. but possibly a DDOS to the internet Infostructure.

Tracing route to warp-01.sjc.jittr.net [208.81.164.10]
over a maximum of 30 hops:

1 7 ms 8 ms 6 ms c-76-23-144-1.hsd1.ct.comcast.net [76.23.144.1]
2 5 ms 6 ms 9 ms ge-3-1-ur01.norwich.ct.hartford.comcast.net [68.86.230.97]
3 6 ms 6 ms 6 ms te-9-1-ur01.easthampton.ct.hartford.comcast.net [68.86.231.161]
4 7 ms 8 ms 6 ms te-8-3-ur01.middletown.ct.hartford.comcast.net [68.87.182.33]
5 9 ms 8 ms 8 ms te-9-3-ar01.berlin.ct.hartford.comcast.net [68.87.182.49]
6 9 ms 8 ms 8 ms po-10-ar01.chartford.ct.hartford.comcast.net [68.87.146.29]
7 12 ms 17 ms 12 ms 64.215.24.86
8 13 ms 17 ms 12 ms 64.215.24.85
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

Back to top
View users profile Send private message
Hoov

Zone Alarm Host
Zone Alarm Host
PIRT Handler

Joined: Jun 21, 2002
Posts: 4604
Location: USA
1st Responders Phishing Squad Premium RootKit Detection Hosts Rootkit Responders Team F@H

PostPosted: Sun Mar 02, 2008 8:03 am    Post subject:
Reply with quote

Those two IP's belong to Global Crossing. Probably a load balancer.

If ZA is blocking the incoming signal, then you are doing all you can. Go into the program list in ZA and remove the entry for that program.

The only thing I can think of is that Jittr is like some file sharing programs, and once they get your IP address, they hang onto it for a while.

What kind of connection do you have? If you have a dynamic IP address, try restarting your modem. This will get you a new IP address, and it will move you out of range of the jittr server.


_________________
For ZoneAlarm help http://www.donhoover.net
Back to top
View users profile Send private message Send email Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Zone Alarm All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer