Bittorrent
From Protocolinfo
Bittorrent is a P2P filesharing protocol. The official protocol is documented here.
Contents |
[edit] Identification
Note: Some Bittorrent clients are starting to implement end-to-end encryption which may make it very difficult to use the methods below to identify their traffic. The recent development of the Message Stream Encryption protocol is specifically designed to avoid any packet classification by ensuring no signature bytes are sent in the header.
[edit] Ports
Bittorrent uses TCP. Downloaders generally listen on ports 6881-6889, but can use others. Azureus uses UDP port 57990 by default for its distributed database, but this number is easily changed.
[edit] l7-filter
l7-filter uses the bittorent pattern. It is well tested.
[edit] IPP2P
IPP2P can match Bittorrent using the --bit option.
