Security Basics mailing list archives
RE: P2P Services and IDS
From: Alvey Robert W KPWA <AlveyRW () kpt nuwc navy mil>
Date: Wed, 26 Nov 2003 07:33:30 -0800
Check out www.zeropaid.com They've got a huge listing of P2P services and you can usually find the ports they use on the homepages (listed so people behind firewalls know what ports to open:). -----Original Message----- From: jburzenski () americanhm com [mailto:jburzenski () americanhm com] Sent: Tuesday, November 25, 2003 1:47 PM To: security-basics () securityfocus com Subject: P2P Services and IDS Does anyone have an updated list of well known p2p ports? I'm also looking for any Snort rules to detect p2p activity. Snort out of the box comes with some rules for Gnutella, Kazaa, Napster and BitTorrent but I want to be able to detect hosts running some of the more obscure p2p clients as well (bearshare, grokster, etc.). I have to imagine someone else has done this already but I can't find the information anywhere. Hopefully, someone on this list has some resources. Otherwise, I'll start reinventing the wheel on Monday... Thanks, Jason --------------------------------------------------------------------------- ---------------------------------------------------------------------------- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- P2P Services and IDS jburzenski (Nov 25)
- <Possible follow-ups>
- RE: P2P Services and IDS Ed Fisher (Nov 26)
- RE: P2P Services and IDS Alvey Robert W KPWA (Nov 26)