Quote
JohnHell
Without giving more details, as which is that site, if not private and you can share it... in a simple search looks like you have Android devices in your home connecting through WiFi and what it look like traffic comming to you, may be a HUB, instead a Switch, sending back information to you PC. Or you are using tethering with your smartphone and what looks like connections from your PC, actually are connections for your android.
But, as said, without further details, can't be said anything useful but pure wild guesses.
Well your versions about "android" and "wifi" are wrong, as I'm not using android devices and wifi spot is completely disabled on my router.
However I nicely checked today behaviour with other sites accessed using HTTPS, and those "wild guesses" generally were not confirmed ^^
As now it is clear that suspicious traffic definitely comes from WAN, but not because K-Meleon does that. It looks like only that particular site does something unclear (as it sends lot of ICMP packets from rtc4-nyc.b6.io, every packet is probably encrypted/incapsulates other protocol, as it has very different size).
So I was wrong with that, suspicioning K-Meleon.
Thank for your answer.
Anyway there is still one small related question I'm interested in -- for what K-Meleon tries to connect to a random port on localhost? (it does it on every startup).
Edited 1 time(s). Last edit at 12/14/2016 05:26PM by SomeAnotherOne.