IDS mailing list archives
Re: Bittorrent - utorrent
From: Christian Kreibich <christian () whoop org>
Date: Thu, 08 Mar 2007 12:21:30 -0800
On Wed, 2007-03-07 at 20:38 +0100, Ove Dalgård Hansen wrote:
Does anyone out there have a good idea of how i am to solve the issue?
Unless I'm misreading the spec for BitTorrent's message stream encryption pretty substantially, that protocol has nothing to do with SSL/TLS. So the differences in the handshakes should stick out enough to allow detection. Cheers, Christian -- ________________________________________________________________________ http://www.icir.org/christian http://www.whoop.org ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------
Current thread:
- Re: Bittorrent - utorrent, (continued)
- Re: Bittorrent - utorrent Tremaine Lea (Mar 14)
- Re: Bittorrent - utorrent jhori (Mar 14)
- Message not available
- Fwd: Bittorrent - utorrent kevin fielder (Mar 14)
- Re: Bittorrent - utorrent Robert Schwartz (Mar 14)
- Re: Bittorrent - utorrent Tremaine Lea (Mar 14)
- Re: WAS: Bittorrent - utorrent NOW: Certificate Talk Randal T. Rioux (Mar 19)
- Re: WAS: Bittorrent - utorrent NOW: Certificate Talk Tremaine Lea (Mar 19)
- RE: WAS: Bittorrent - utorrent NOW: Certificate Talk Erick Jensen (Mar 20)
- Re: Bittorrent - utorrent Roland Turner (Security Focus) (Mar 14)
- Re: Bittorrent - utorrent Tremaine Lea (Mar 12)
- Re: Bittorrent - utorrent Stephen Clowater (Mar 12)
- RE: Bittorrent - utorrent Velasquez Venegas Jaime Omar (Mar 12)
- Re: Bittorrent - utorrent Tremaine Lea (Mar 19)