Snort mailing list archives

Re: Rule for Morpheous yet?


From: Phil Wood <cpw () lanl gov>
Date: Thu, 16 Aug 2001 10:46:22 -0600

It appears to be spelled:

  Morpheus

And, according to the download html, is a full-featured P2P file-sharing application that allows users to search for 
all types of digital media across the MusicCity Network. Morpheus is neither central server-based, like Napster, nor 
based on the Gnutella file-sharing protocol. The program uses a proprietary peer-to-peer protocol to share files among 
users on the network. <p>Morpheus offers advanced features such as playlist creation and media management to easily 
organize your file collection. It also offers an embedded Microsoft media player for audio and video playback, instant 
messaging, and CPU utilization throttling. The program automatically resumes broken content streams by finding another 
source. Morpheus also simultaneously transfers content files from multiple sources for fast downloads of large files, 
even from users with slower connection speeds.<p>Version 1.3 offers user controlled upload limits, better memory 
utilization, improved performance on Windows 98/Me, search by file size, and more.<p><b>Note:</b> Users should be sure 
that their current Morpheus 1.2 application is completely shut down (at the task bar) before attempting to install 
version 1.3.

On Thu, Aug 16, 2001 at 06:56:10AM -0700, Erek Adams wrote:
On Wed, 15 Aug 2001, Tom Sevy wrote:

Does anyone have a rule for Morpheous yet?  Morpheous is a new peer
to peer system.

Funny you should ask....  :)

My 16 yearold daughter has this package on her PC.  There was a very good
dissection of it on the Vul-Dev or Pen-Test list, I can't recall which.
There are some things you can use to create a rule, but I've not had enough
coffee yet.  :)  Lemme dig thru my archives and I'll forward you what I've
got.  If anyone else wants the messages, lemme know and I'll make them
available.

One thing:  On the machine that's running it--There is a mini-web server on
like port 1417 or something like that.  Connect to http://host:1417/ and you
can grab any of the files without any authentication or difficulty.

[I think 1417 is right, but I can't say for sure.  Use Nmap, you'll be able to
see it.]

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 
Phil Wood, cpw () lanl gov


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: