[galtwish]

I've seen several computers infected with Malware display IPv4 Statistics (netstat -s from the command window) that show Packets Received = X and Received Packets Delivered = X+Y. Checking with an interval setting doesn't reconcile this imbalance; it persists over the course of minutes.

What causes more packets to be delivered than received?

Would a healthy PC display this imbalance?

Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\>netstat -s

IPv4 Statistics

Packets Received = 47396
Received Header Errors = 0
Received Address Errors = 60
Datagrams Forwarded = 0
Unknown Protocols Received = 0
Received Packets Discarded = 4
Received Packets Delivered = 51213
Output Requests = 37112
Routing Discards = 0
Discarded Output Packets = 0
Output Packet No Route = 0
Reassembly Required = 0
Reassembly Successful = 0
Reassembly Failures = 0
Datagrams Successfully Fragmented = 0
Datagrams Failing Fragmentation = 0
Fragments Created = 0

ICMPv4 Statistics

Received Sent
Messages 83 81
Errors 0 0
Destination Unreachable 5 3
Time Exceeded 0 0
Parameter Problems 0 0
Source Quenches 0 0
Redirects 0 0
Echos 15 63
Echo Replies 63 15
Timestamps 0 0
Timestamp Replies 0 0
Address Masks 0 0
Address Mask Replies 0 0

TCP Statistics for IPv4

Active Opens = 1411
Passive Opens = 502
Failed Connection Attempts = 30
Reset Connections = 248
Current Connections = 28
Segments Received = 41110
Segments Sent = 32309
Segments Retransmitted = 939

UDP Statistics for IPv4

Datagrams Received = 6017
No Ports = 471
Receive Errors = 8
Datagrams Sent = 3808