Re: Bittorrent - utorrent

[Christian Kreibich <christian () whoop org>]

On Wed, 2007-03-07 at 20:38 +0100, Ove Dalgård Hansen wrote:
> Does anyone out there have a good idea of how i am to solve the issue?

Unless I'm misreading the spec for BitTorrent's message stream
encryption pretty substantially, that protocol has nothing to do with
SSL/TLS. So the differences in the handshakes should stick out enough to
allow detection.

Cheers,
Christian
-- 
________________________________________________________________________
                                           http://www.icir.org/christian
                                                    http://www.whoop.org


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------