Detecting Skype: anyone know how "Tom Online" do it?

[Jason Haar <Jason.Haar () trimble co nz>]

According to http://tinyurl.com/p7umu, "Tom Online" is the Skype partner
in China whose product is able to do word filtering on Skype traffic -
i.e. to be able to block Skype chats containing "illegal" words.

As Skype traffic is supposed to be AES encrypted, that sounds rather
spectacular.

Does anyone have other details on this? Have they reverse-engineered it,
and can we take advantage of such information with snort? ;-)

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users