RE: P2P Services and IDS
From: Alvey Robert W KPWA (AlveyRW_at_kpt.nuwc.navy.mil)
Date: 11/26/03
- Previous message: Markus Müssig: "Re: Is The RPC a Protocol or a winXP-Service?"
- Maybe in reply to: jburzenski_at_americanhm.com: "P2P Services and IDS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "'jburzenski@americanhm.com'" <jburzenski@americanhm.com>, security-basics@securityfocus.com Date: Wed, 26 Nov 2003 07:33:30 -0800
Check out www.zeropaid.com They've got a huge listing of P2P services and
you can usually find the ports they use on the homepages (listed so people
behind firewalls know what ports to open:).
-----Original Message-----
From: jburzenski@americanhm.com [mailto:jburzenski@americanhm.com]
Sent: Tuesday, November 25, 2003 1:47 PM
To: security-basics@securityfocus.com
Subject: P2P Services and IDS
Does anyone have an updated list of well known p2p ports?
I'm also looking for any Snort rules to detect p2p activity. Snort out of
the box comes with some rules for Gnutella, Kazaa, Napster and BitTorrent
but I want to be able to detect hosts running some of the more obscure p2p
clients as well (bearshare, grokster, etc.). I have to imagine someone else
has done this already but I can't find the information anywhere. Hopefully,
someone on this list has some resources. Otherwise, I'll start reinventing
the wheel on Monday...
Thanks,
Jason
---------------------------------------------------------------------------
----------------------------------------------------------------------------
---------------------------------------------------------------------------
----------------------------------------------------------------------------
- Previous message: Markus Müssig: "Re: Is The RPC a Protocol or a winXP-Service?"
- Maybe in reply to: jburzenski_at_americanhm.com: "P2P Services and IDS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
