I'm getting these firewall reports in my event log:
#1:
Event Type: Success Audit Event Source: Security Event Category: Detailed Tracking Event ID: 861 Date: 5/22/2007 Time: 11:37:19 AM User: *********** Description: The Windows Firewall has detected an application listening for incoming traffic.
Name: FIREFOX Path: C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.exe Process identifier: 2664 User account: ***** User domain: NT AUTHORITY Service: NO RPC server: No IP version: IPv4 IP protocol: UDP Port number: 2858 Allowed: YES User notified: No
This pattern continues many (28) times until I see #2
Event Type: Failure Audit Event Source: Security Event Category: Detailed Tracking Event ID: 861 Date: 5/22/2007 Time: 11:45:21 PM User: NT AUTHORITY\SYSTEM Description: The Windows Firewall has detected an application listening for incoming traffic.
it appears using UDP protocol for the following ports, #3477, 3479, 3465, 3477, 3467 3463, 3461, 3457, 3455, 3453, etc... events are one right after the other in my security log
NOTE: I use Tor.
Is this normal or do I have issues or something that should not be happening here? Or am I being overly paranoid.