Forum Discussion
kykong_107132
Nimbostratus
NimbostratusDetect limewire P2P traffic.
Hi All,
Wondering anyone know using irules how can we detect limewire P2P traffic? I have a solution for eDonkey and bittorrent, but not sure how limewire traffic look like.
thank...
kykong_107132Nimbostratus
Nimbostratusthis is the irule to detect bittorrent traffic. actually i get this from F5 solution center.
when CLIENT_ACCEPTED {
TCP::collect 0 0
}
when CLIENT_DATA {
append payload [TCP::payload]
if {[string length $payload] < 6} {
TCP::release
return
}
TCP::release
binary scan $payload cc5 bt_size bt_protocol
if {($bt_protocol == "66 105 116 84 111") && ($bt_size == 19)} { from the TCP payload, Bittor(66 105 116 84 111 is the binary format for “bittorrent) content a protocol name “bitorrent” and the protocol name length is 19
log "Torrent traffic from [IP::remote_addr]"
discard
}
}
