Short answer, no ntop has protocol decoders for specific protocols in pbuf.c and sessions.c. It's easy to extend for some protocols (those that are largely stateless). Read the code - grep for gnutella. As long as they don't cost a lot of analysis time or memory, we'd love to have new ones.
-----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dilan Arumainathan Sent: Monday, February 17, 2003 10:45 AM To: [EMAIL PROTECTED] Subject: [Ntop] How does ntop detect Gnutella Hi, I just bumped into something that I did not realize that Ntop can do. In the IP protocol distribution page it listed Gnutella and the traffic sent and received. Is it then possible to add support for other P2P protocols. Is it possible in anyway to extend the capabilities of Ntop with Snort like signatures? thanks dilan _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
