Page 1 of 1

P2P Filter

Posted: Sat Sep 15, 2007 6:03 am
by Equis
Hello

Does RouterOS detect almost all P2P traffic? (utorret, encyption ect)

Perhaps it does 95% or something.

Also, in queue, what is the diffrenece between marking con, the packed with p2p or just using the P2P combo box in the queue? (no need to mark)

Thanks!

:-)

Re: P2P Filter

Posted: Sat Sep 15, 2007 10:07 pm
by Znuff
Encrypted p2p traffic is impossible to detect.

Re: P2P Filter

Posted: Mon Sep 17, 2007 3:55 pm
by sergejs
RouterOS detects common P2P protocols, not all. It is not possible to detect traffic that is encrypted (you can only drop encrypted torrent traffic, when bittorent is denied at your router).
There are no difference, if you are using 'queue simple, then mangle rule configuration for marking p2p is not required.

Re: P2P Filter

Posted: Mon Sep 17, 2007 4:13 pm
by ghmorris
RouterOS detects common P2P protocols, not all. It is not possible to detect traffic that is encrypted (you can only drop encrypted torrent traffic, when bittorent is denied at your router).
Could you explain this just a little more please sergejs?

Are you saying that RouterOS can detect encrypted bittorent and drop it, or that encrypted bitttorent can't be detected at all?

Thanks
George

Re: P2P Filter

Posted: Mon Sep 17, 2007 5:17 pm
by janisk
initial ip packets of encrypted p2p connection can be recognized, and therefore can be dropped and connection will not happen, with encrypted traffic - it is encrypted and completely undetectable for limiting.

but if you set queue for user, then he will be limited to that amount of traffic no matter what kind it is.