|
1
|
# FastTrack - P2P filesharing (Kazaa, Morpheus, iMesh, Grokster, etc)
|
|
2
|
# Pattern attributes: good slow notsofast
|
|
3
|
# Protocol groups: p2p
|
|
4
|
# Wiki: http://www.protocolinfo.org/wiki/Fasttrack
|
|
5
|
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
|
|
6
|
#
|
|
7
|
# Tested with Kazaa Lite Resurrection 0.0.7.6F
|
|
8
|
#
|
|
9
|
# This appears to match the download connections well, but not the search
|
|
10
|
# connections (I think they are encrypted :-( ).
|
|
11
|
|
|
12
|
fasttrack
|
|
13
|
# while this is a valid http request, this will be caught because
|
|
14
|
# the http pattern matches the response (and therefore the next packet)
|
|
15
|
# Even so, it's best to put this match earlier in the chain.
|
|
16
|
# http://cvs.berlios.de/cgi-bin/viewcvs.cgi/gift-fasttrack/giFT-FastTrack/PROTOCOL?rev=HEAD&content-type=text/vnd.viewcvs-markup
|
|
17
|
|
|
18
|
# This pattern is kinda slow, but not too bad.
|
|
19
|
^get (/.download/[ -~]*|/.supernode[ -~]|/.status[ -~]|/.network[ -~]*|/.files|/.hash=[0-9a-f]*/[ -~]*) http/1.1|user-agent: kazaa|x-kazaa(-username|-network|-ip|-supernodeip|-xferid|-xferuid|tag)|^give [0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]?[0-9]?[0-9]?
|
|
20
|
|
|
21
|
# This isn't much faster:
|
|
22
|
#^get (/.download/.*|/.supernode.|/.status.|/.network.*|/.files|/.hash=[0-9a-f]*/.*) http/1.1|user-agent: kazaa|x-kazaa(-username|-network|-ip|-supernodeip|-xferid|-xferuid|tag)|^give [0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]?[0-9]?[0-9]?
|
|
23
|
|