Educause Security Discussion mailing list archives

Re: classifying P2P traffic


From: "Julian Y. Koh" <kohster () NORTHWESTERN EDU>
Date: Tue, 29 Jan 2008 09:18:55 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 08:49 -0600 1/29/2008, Youngquist, Jason R. wrote:
What devices are you using to monitor P2P traffic and how well are they
working for you?  Is there some P2P traffic that you believe your
monitoring software isn't catching?  Ie. encrypted traffic, outdated P2P
definitions from the vendor, etc.

We use a Packeteer PacketShaper.  It definitely doesn't handle the
encrypted P2P file transfers that well, which led to our having to create
dynamic subpartitions for our dorm/wireless/VPN IP ranges to limit
unclassifiable traffic to 512Kbps per host based on IP address.  But
overall it seems to be working quite well with that arrangement.

-----BEGIN PGP SIGNATURE-----
Version: 9.7.0.1012

wj8DBQFHn0PfDlQHnMkeAWMRAoDzAJwMlppTnevV1YGjkuetY5ZOyS6M+QCeKjHi
LyozUrch8glp6RgLmTKnEOk=
=4azQ
-----END PGP SIGNATURE-----

--
Julian Y. Koh                         <mailto:kohster () northwestern edu>
Network Engineer                                   <phone:847-467-5780>
Telecommunications and Network Services         Northwestern University
PGP Public Key:<http://bt.ittns.northwestern.edu/julian/pgppubkey.html>

Current thread: