Re: [WISPA] P2P Countermeasures

Tue, 20 Nov 2007 13:20:38 -0800

This sort of stuff uses a combination of ports, traffic heuristics (different types of traffic will have different traffic patterns--ie web browsing is intermittent, FTP may be sustained, p2p will have show a lot of simultaneos connections all over, most of which timeout, etc) and deep packet inspection. Deep packet inspection is marketing meaning they'll grab the first few packets from a Tcp or whatever session and analyze to see what type of traffic it is.
It's quite simple stuff (once you brush all the marketing jumbo aside); if, for whatever reason (ie encryption) it can't use one of the above methods, it will just rely on the other two with the liability of less accurate results (resulting in some targetted traffic passing unfiltered and some untargetted traffic getting dropped). 

- Clint Ricker



On Nov 20, 2007, at 3:54 PM, "Jeff Broadwick" <[EMAIL PROTECTED]>  
wrote:



I'd be very interested in knowing how they do that.  The point of  
encryption
is to mask the traffic, so layer 7 packet inspection should not be  
able to

tell what is there.

Jeff


-----Original Message-----

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  
On

Behalf Of Mike Bushard, Jr
Sent: Tuesday, November 20, 2007 3:44 PM
To: 'WISPA General List'
Subject: RE: [WISPA] P2P Countermeasures

I haven't specifically tested it, but they say that the Deep Packet

Inspection engine will mark and rate limit Encrypted Peer 2 Peer  
traffic. I

know my AC-802 does a very good job of marking and shaping traffic.

Mike Bushard, Jr
Wisper Wireless Solutions, LLC
320-256-WISP (9477)
320-256-9478 Fax


-----Original Message-----

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  
On

Behalf Of Jeff Broadwick
Sent: Tuesday, November 20, 2007 2:32 PM
To: 'WISPA General List'
Subject: RE: [WISPA] P2P Countermeasures

How does the Allot box handle the encrypted ptp traffic Mike?

Jeff


-----Original Message-----

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  
On

Behalf Of Mike Bushard, Jr
Sent: Tuesday, November 20, 2007 2:48 PM
To: 'WISPA General List'
Subject: RE: [WISPA] P2P Countermeasures

Buy an Allot Box.

Mike Bushard, Jr
Wisper Wireless Solutions, LLC
320-256-WISP (9477)
320-256-9478 Fax

-----Original Message-----

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  
On

Behalf Of Jeff Broadwick
Sent: Tuesday, November 20, 2007 12:57 PM
To: 'WISPA General List'
Subject: RE: [WISPA] P2P Countermeasures

How do you identify it if it is encrypted?

Jeff

-----Original Message-----

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  
On

Behalf Of Marlon K. Schafer (509) 982-2181
Sent: Tuesday, November 20, 2007 12:41 PM
To: WISPA General List
Subject: Re: [WISPA] P2P Countermeasures

Call Butch,

We set ALL ptp traffic to share a single 128k connection.  >:-)

laters,
Marlon
(509) 982-2181
(408) 907-6910 (Vonage)                    Consulting services

42846865 (icq)                                    WISP Operator  
since 1999!

[EMAIL PROTECTED]
www.odessaoffice.com/wireless
www.odessaoffice.com/marlon/cam



----- Original Message -----
From: "Ron Wallace" <[EMAIL PROTECTED]>
To: "WISPA General List" <[email protected]>
Sent: Monday, November 19, 2007 4:58 PM
Subject: [WISPA] P2P Countermeasures



To All,
The issue of P2P rears its relatively unattractivehead in my neck of
the woods from time to time. This is one of those times.

- So, what is everyone doing to'counter' the influx of traffic from  
P2P?

- What are the most effective "P2P countermeasures" that you have
employed, lately?
- For those fo you that respond, I will put it all in a file and make
it available to all, via Scriv.
Heck who should approve the dumpingofthat info onto WISPA - Rick
Harnish -



I'll checkwith him.
Ron Wallace
Hahnron, Inc.
220 S. Jackson Dt.
Addison, MI 49220

Phone: (517)547-8410
Mobile: (517)605-4542
e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED]






--- 
--- 
----------------------------------------------------------------------

----

WISPA Wants You! Join today!
http://signup.wispa.org/


--- 
--- 
----------------------------------------------------------------------

----


WISPA Wireless List: [email protected]

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/






--- 
--- 
----------------------------------------------------------------------

----
WISPA Wants You! Join today!
http://signup.wispa.org/

--- 
--- 
----------------------------------------------------------------------

----

WISPA Wireless List: [email protected]

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/




--- 
--- 
----------------------------------------------------------------------

----
WISPA Wants You! Join today!
http://signup.wispa.org/

--- 
--- 
----------------------------------------------------------------------

----

WISPA Wireless List: [email protected]

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/





--- 
--- 
----------------------------------------------------------------------

----
WISPA Wants You! Join today!
http://signup.wispa.org/

--- 
--- 
----------------------------------------------------------------------

----

WISPA Wireless List: [email protected]

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/




--- 
--- 
----------------------------------------------------------------------

----
WISPA Wants You! Join today!
http://signup.wispa.org/

--- 
--- 
----------------------------------------------------------------------

----

WISPA Wireless List: [email protected]

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/





--- 
--- 
----------------------------------------------------------------------

----
WISPA Wants You! Join today!
http://signup.wispa.org/

--- 
--- 
----------------------------------------------------------------------

----

WISPA Wireless List: [email protected]

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/




--- 
--- 
--- 
--- 
--------------------------------------------------------------------

WISPA Wants You! Join today!
http://signup.wispa.org/

--- 
--- 
--- 
--- 
--------------------------------------------------------------------


WISPA Wireless List: [email protected]

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/



--------------------------------------------------------------------------------
WISPA Wants You! Join today!
http://signup.wispa.org/
--------------------------------------------------------------------------------

WISPA Wireless List: [email protected]

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/

























					Reply via email to