From mboxrd@z Thu Jan  1 00:00:00 1970
From: Dimitris Kotsonis <jnk@comkey.spark.net.gr>
Date: Sat, 21 Aug 2004 09:13:16 +0000
Subject: [LARTC] info an ARES/WAREZ
Message-Id: <4127122C.3070601@comkey.spark.net.gr>
List-Id: <lartc.vger.kernel.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: lartc@vger.kernel.org


  Hello,

    I'm blocking/limiting succesfully all P2P activity on our corporate 
network using linux/ipp2p/connmark.

    That is, until now. For my colleagues have found a new p2p client to 
wreck havoc on our DSL line: ARES/WAREZ  It seems to be a gnuttela 
clone, but different enouph for ipp2p not to identify it.

    I played around a bit with tcpflow with no success of finding  
something that could be taken as a positivie signature in its headers.

    Is there any info of this new p2p network ? Any open soure client ? 
Something that could be used to reverse engineer (at least partially) 
its protocol ?

    I will really hate to block all FORWARD traffic and I am willing (at 
least try) to write a new filter for ipp2p.

    Thanks for your time.

    Dimitris.
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/