Jump to content
Not connected, Your IP:

What is the overhead traffic from Eddie about?

Recommended Posts

I am using Eddie 2.11.3 in latest Mac OSX . I found there was continual overhead traffic from Eddie, no matter what protocol I am using. The traffic was triggered each 10 seconds and sized several hunderds KBits. I am worried about it because it looks like a malcilous activity. Is it a normal situation? What is the traffic about and used for?​

​Attached my screen capture about the situation. Thank you in advance.

Share this post

Link to post



I think it's normal back and forth updating with the Air servers or something of that order . However computers themselves can be quite chatty, if you haven't stopped them from being so through things like firewalls.


Sent to you from me with datalove

Moderators do not speak on behalf of AirVPN. Only the Official Staff account does. Please also do not run Tor Exit Servers behind AirVPN, thank you.
Did you make a guide or how-to for something? Then contact me to get it listed in my new user guide's Guides Section, so that the community can find it more easily.

Share this post

Link to post

If your client doesn't talk with the server, the server will kill the connection. Especially using UDP which is a connection-less protocol. If I was a server and I'd talk to someone but this someone wouldn't say anything I may think he's dead or something.

The traffic you see is the server asking the client if it's still there, the client answering with "Yes". It's called a keepalive.

» I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such.

» The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets.

» If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead.

» If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon).

» The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers.


» Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again.

Share this post

Link to post

Looking at your tiff screen from your network monitor, the up and down traffic looks very symmetric, so seems more like some sort of echo or keep alive or polling overhead than malicious penetration or uploading.

On Windows, I have been curious enough about odd traffic to install Wireshark https://www.wireshark.org which does packet analysis, and it appears to also have an OSX version. Seems recommended by network professions, but you may need to learn a bit about Internet Protocol to understand what you are seeing. You need to intercept the traffic at the interface before openvpn tap.

Share this post

Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Security Check
    Play CAPTCHA Audio
    Refresh Image

  • Create New...