In fact it may be avast pinging our updating servers, determining if they are reachable. Are those ICMP packets (pings)?