The solution would be platform specific due to different network stack implementations. Please update your question and specify which OS you are working on.

Windows updates is the biggest root kit windows has. Are you aware of any convenient way to debug this to see which process or driver caused that?

@IgnacioVazquez-Abrams this must have something to do with this. I uninstalled Apple's Bonjour (must have came with itunes) and the "problem" is gone.

I don't explicitly monitor the traffic but the interactive mode informs me upon connection attempt to allow/deny

Windows 7 "a comment is too short"

The question is how do I apply this patch if it's an update as well. How can I install an update but skip the "search for available updates" that comes before installing any update (even the one executed from a direct/offline) file.