P2P Services and IDS
jburzenski_at_americanhm.com
Date: 11/25/03
- Previous message: Rodrigo Otaviano: "Re: ISA blocking ICQ"
- Next in thread: Ed Fisher: "RE: P2P Services and IDS"
- Maybe reply: Ed Fisher: "RE: P2P Services and IDS"
- Maybe reply: Alvey Robert W KPWA: "RE: P2P Services and IDS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: security-basics@securityfocus.com Date: Tue, 25 Nov 2003 16:46:48 -0500
Does anyone have an updated list of well known p2p ports?
I'm also looking for any Snort rules to detect p2p activity. Snort out of
the box comes with some rules for Gnutella, Kazaa, Napster and BitTorrent
but I want to be able to detect hosts running some of the more obscure p2p
clients as well (bearshare, grokster, etc.). I have to imagine someone else
has done this already but I can't find the information anywhere. Hopefully,
someone on this list has some resources. Otherwise, I'll start reinventing
the wheel on Monday...
Thanks,
Jason
---------------------------------------------------------------------------
----------------------------------------------------------------------------
- Previous message: Rodrigo Otaviano: "Re: ISA blocking ICQ"
- Next in thread: Ed Fisher: "RE: P2P Services and IDS"
- Maybe reply: Ed Fisher: "RE: P2P Services and IDS"
- Maybe reply: Alvey Robert W KPWA: "RE: P2P Services and IDS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]