Page 1 of 1

Why is Host Interface Network Driver contacted on port 6999

Posted: 2. Jan 2009, 18:33
by dOz
Hello,
I'm on windows XP (32-bit) and every time I boot windows, my firewall says

VirtualBox Host Interface Networking Driver is being contacted from a remote machine. I just installed VBox not too long ago so I have only seen this a few times but the local port is 6999 and the remote IP changes keeps changing. Any Ideas why this happens?

Here is an example

File Version : 5.2.3790.1830
File Description : VirtualBox Host Interface Networking Driver (VBoxNetFlt.sys)
File Path : C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys
Connection origin : remote initiated
Protocol : UDP
Local Address : 192.168.0.2
Local Port : 6999 (IATP-NORMALPRI - IATP-normalPri)
Remote Name :
Remote Address : 83.87.229.151
Remote Port : 24405

Posted: 2. Jan 2009, 20:09
by dOz
I think I know what is going.
I have port 6999 open in my router, forgot about that. It appears I'm picking up connection requests on that port. I just remembered a while back seeing similar requests (different ports and IP) like this; before I allowed some Windows Services through my software firewall which probably handle networking.

At first I thought the Host Ineterface Networking Driver would only communicate when VirtualBox was running. Noticing that it is running at startup I'm assuming all communication is probably going through the driver, therefore behaving like the Windwos Services did before.