From mboxrd@z Thu Jan 1 00:00:00 1970 From: "GoMi" Date: Tue, 13 May 2003 12:53:36 +0000 Subject: [LARTC] KaZZaa and connection sequences MIME-Version: 1 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0006_01C3195F.6E692D40" Message-Id: List-Id: To: lartc@vger.kernel.org This is a multi-part message in MIME format. ------=_NextPart_000_0006_01C3195F.6E692D40 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi there, i am having big touble wiht traffic shaping and kazza, by any = reason, it seems to collapse all the system. I have a firewall to stop = users using p2p programs during day time, and then its totally free for = them to access anywhere during night-time. =20 First problem Problem... KaZZa During day-time, there are kazza servers accepting connections on pot = 80, and because i cant filter that port, my users can dowload. I have = tried to study the sequence of kazza programs using tcpdump, but i got = no conclusions, Does anybody know how to distinguish between HTTP = connections and KaZZa? =20 Second Problem... KaZZa (hehehe) During night-time, i register lots of ack packets due to kazza programs, = anybody in the same situation? I just red about layer-7 filtering, but i = cant change my kernel right now, so i want to try as much as i can with = packet filtering.. Anybody here? =20 Thank You =20 GoMi -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 iQA/AwUBPsDqz37diNnrrZKsEQKkTwCeMuH0YpDT7Qxg6XMdycivAYUqgM4AniF0 fo6yBE3P1OqqZrKHt5t7fxaf =3DZ00o -----END PGP SIGNATURE----- ------=_NextPart_000_0006_01C3195F.6E692D40 Content-Type: application/octet-stream; name="PGPexch.rtf.pgp" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="PGPexch.rtf.pgp" owHtWc1vG0UUNyAkVKkHLkiol0eQ+JLj/bDXTlWnURo7adTmQ40BpdrLeHfWu83uzDIzG8uNDCek cuWMBEeQWsEFcUJU4sgBIU4IOHIBceIf4M3a+bC7gVK1UgFv5N3szJv3/d5vRvteaempp5+4ePfX b9/++dYPv915//azT956rvTRx3ff+fqzjvHVdz/1P33e+L1f/vzKWumDZ765tXZt1f/x3e9vfzn3 iXnuC/7hH3fO/aJKQalUOnCFCiyXMBnlNy/tWbZju4HgSaiS2ALXp0FgHrgBZ0p147Nn8F/TDWQ/ ktINvJAISZUJyyIi8YVhPm25QcJ9Khis8ExEVMAm7Y/nkDWL4qOFNuwMki4/XFk9XHmC8708amPx h0LzUY/HXKCCrqC+6fYEpcx0u3FGzQv3DNmOUzyInNzMs9yUCN9NYxIxbb4i3WrdhJHddg20uNdc 7R5FenatCs0XWlsrnd3tNlzubFyF7dcvXV1fgbl5w3izumIYrU5rNFGrmNAR2s8q4ozEhtHenLs4 nOBXBS0dJget89DUHKZpazjcXm5NDVuNBjQ7652r7akJu2bBBmWS3KBTKxYcaBpFS6xCdQoH6xY0 N9qdZfAwVShTi3MbO7nZ9YppVuyGXa3YjmnOASMJXVxrb7avLXe2rt2PQK14c6ezW2jR9Aj6yiii LeSsGRsFPrSLiB0Tmpe2WrvQ7a3odFt8Mcivi8OcAksJ3P2I9vci5jujlV3i7fUEz5gPB64MUz2G j4hJhe/4KhkEURzn/Ib4ug9WvdFo2JYzHB5TrCIJ9cfzQ30dSjQn09Es0vt8HZqt9TdOqHlwvPwE Xb1WSDHpxdoCNFe3NjsQEI8u5iUI3sgbJl5BADK6SRftCWlBDVwvQKdiAaGKxawXMJ13tpc3wYuJ lIs157zt1OqWPW9VTcc2zWqxAZejSTa1sQtUSAUtQwQkgZDsR6wH3agHimfdmEI/ChUoQYIg8kCG JNXzBMO0R27eJGXoDvBtAIISyRlyUcVCJKWJRJ7aBTFJJQUSx4CiQQ6kokkF1rVwHMYwC9rPZzlI xVPIJBUS71pyaqfFAlLBe4KgDB/bIBL6ZAAqStAwrSwKYqib1kAh6wEE2NAg4ELPJFoS8TyKrRJt 6Wt/FAsZ82ZRL1TzmntlMn9sXVIYmRMBOC0BLQeTzdAJUkx8grRhH41rNY6Jzp6ZZGliYhiTCfyf zv/chH9WBI8sXtMavsS6Mr1wouG9TMxZdB9dd1uNhFSntgbsZAlsj56VSgWukOvXyax2/zXRbY0a b3FTJoP5UafPkQwI/nJwAsSNfQ0durenSjPALRejnt5VSuAMUq5gwRxBRJd6BJEGTkFJjzCldyCK aswgCtcKVYZkMIYnnAef92NO/CMsU7gh90cwlvmDEdrRtzLKvFPwhQdjzY/QbIR6ykv9LEkRbTOF CvZQbaahlHkxEqAxZWhxmqNXl6OkPcb7EOKvGPA5+JHU/sgiGaLhqo+7e9x6d7YnHKS9khfK0qxS Zig3Q7nHoA/uUCxQv7isp+ENXgmp/nt1Vr0PNwiPMEf+CueOTx36sCZoD3s4glHM8ViDwIEHaEjx RpU+A1ENO5NYUj6Ch4jlWFR8UCMJolSkMqJBYAmh7EaGGyuBQEa6HOEnJgMq5htjLERtD1EpR0gv JKxHNSzuUcFoXCxEaFMQwvplkByX9vVSVFgJPE1KSDIv1M+cJ55AVTi27FgoJvny2JpCCXonsPTg re1vqmSW+PeV+LkVD9ohH2a8/l+w9fi1tQ52hb3iQt3l2axMZ2U6K9PHJbprfCP6t1akg94w9JeH 6a8UDf31ouDD0DjGfwI= ------=_NextPart_000_0006_01C3195F.6E692D40-- _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/