David Barrett wrote: > You could perhaps reverse DNS the destination IP and see if it either > has no record or falls under an ISP domain. That won't be foolproof, > but neither are the other approaches.
OK, this is a good point, but is a very time expensive test, with a lot of false positive... I think > Perhaps it could be one factor in assigning a "p2p score" to each > packet. Sum up and average the p2p scores of all packets coming out of > a node and then you could have an overall p2p score for that node. Yes, this is a common behavior of all methods above mentioned > It probably depends on your final goal. What are you trying to > accomplish? I'm looking for a new approach in order to implement an application different from current solution (ipp2p, l7-filter, snort p2p rules, packetsure and so on) -- regards, Steve Almasi _______________________________________________ p2p-hackers mailing list [email protected] http://lists.zooko.com/mailman/listinfo/p2p-hackers
