P2P Services and IDS

jburzenski_at_americanhm.com
Date: 11/25/03

  • Next message: Batkin, Seva: "RE: 802.1x RADIUS Deployment in Wireless LAN"
    To: security-basics@securityfocus.com
    Date: Tue, 25 Nov 2003 16:46:48 -0500
    
    

    Does anyone have an updated list of well known p2p ports?

    I'm also looking for any Snort rules to detect p2p activity. Snort out of
    the box comes with some rules for Gnutella, Kazaa, Napster and BitTorrent
    but I want to be able to detect hosts running some of the more obscure p2p
    clients as well (bearshare, grokster, etc.). I have to imagine someone else
    has done this already but I can't find the information anywhere. Hopefully,
    someone on this list has some resources. Otherwise, I'll start reinventing
    the wheel on Monday...

    Thanks,

    Jason

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Batkin, Seva: "RE: 802.1x RADIUS Deployment in Wireless LAN"