Encrypted bittorrent shaping

fadey · 03-02-2007, 02:20 AM

Hello, everyone.
Is anyone familiar with a way to shape (or at least detect) bittorrent users. I used to use kernel patches from http://l7-filter.sourceforge.net. Now, when bittorrent supports encryption its problematic to detect those types of connections. Does anyone have an idea how would one do it (it is possible. Allot Netenforser does it)?
Thanks in advance.

Cliffster · 03-04-2007, 03:34 PM

i imagine that a sniffer was used and comparisons made with looking at the IO of test connections, over time, that would give enough indications that the data is encoded torrent data, and a heuristic could be trained to fire off when it sees data looking a lot like its target, then it could throttle down those particular user's bandwidth. thats my guess.