On Tuesday 22 March 2011 17:37:44 e...@riskproof.no-ip.org wrote: > I have tried no further to determine whether that data is some <tor> > protocol or actually <ssh> protocol. I simply assumed <ssh> protocol as > one(*) would expect by seeing port 22.
Telling ssh traffic from Tor traffic on port 22 is easy. The ssh connection begins with an exchange of ssh version numbers in the clear, then a list of ciphers. Connecting to a Tor port and sending an SSH version will result in a closed connection. cmeclax _______________________________________________ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk