Snort mailing list archives

Re: Block Torrent on VMWare all VMS or one by one??


From: "Shravan Rangarajuvenkata \(shrarang\) via Snort-users" <snort-users () lists snort org>
Date: Tue, 28 May 2019 14:52:25 +0000

You can see all the Torrents clients supported by snort in OpenAppID’s appMapping.data file.


 grep -i torrent appMapping.data

61     BitTorrent    38     229    1349   bt     bt

571    BitTorrent tracker   0      25     0      ~      torrent_tracker

1138   Torrentz      0      0      436    ~      torrentz

1214   ExtraTorrent  0      0      1352   ~      extratorrent

2299   uTorrent      0      362    1876   ~      utorrent

2667   Resilio Sync  20156  407    0      bittorrent_sync      bittorrent_sync

3870   Kickass Torrents     0      0      1652   ~      kickass_torrent

You can add an IPS rule to block the above applications.

Please find the latest OpenAppId release at https://www.snort.org/downloads.

Thanks,
Shravan

From: Snort-users <snort-users-bounces () lists snort org> on behalf of AHMN Group via Snort-users <snort-users () 
lists snort org>
Reply-To: AHMN Group <ahmn48 () gmail com>
Date: Monday, May 27, 2019 at 9:30 AM
To: "snort-users () lists snort org" <snort-users () lists snort org>
Subject: [Snort-users] Block Torrent on VMWare all VMS or one by one??

Hi and thanks for helping me, I just want to block all torrents traffic in my dedicated server, server based on VMWare 
ESXi and I have 17 VMs, I want to block Torrent traffic for them, I don't know how can I do it, I tried to block with 
pfSense, but can't config it well, now after searches find the Snort, now tell me how can block Torrents traffic??
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: