SonicALERT
Search

Sonicwall Signatures


Go to All Categories list.
Go to All Applications list.

Application: BitTorrent Protocol

BitTorrent Protocol is a peer-to-peer file sharing (P2P) communications protocol, famous (or infamous) for its ability to distribute large data files--movies, software, photos, documents, etc. Usage of the protocol accounts for significant traffic on the Internet. Peer-to-peer networks are characterized by a decentralized topology of temporary peer nodes that join and leave the network, unlike traditional client-server networks. BitTorrent is maintained by BitTorrent, Inc. There are numerous compatible BitTorrent clients, such as uTorrent, BitComet, Deluge, TurboBT, and Transmission, and Xunlei (a Chinese-language file sharing client). Many of these BT Clients, in addition to using the BitTorrent Protocol proper, also use other file-sharing protocols and downloading methods, such as eMule/eDonkey protocol, and so-called HTTP Download Acceleration. (HTTP Download Acceleration is clever use of the HTTP 'Range' header in HTTP requests. Multiple HTTP requests are made in parallel for different byte ranges of the file.) BitTorrent clients also use encryption techniques to evade firewall application control over both TCP and UDP. To block all file-sharing applications we recommend enabling the entire P2P category, both SonicWALL Encrypted Key Exchange application signatures (sids: 5 & 7), and the PROTOCOLS >> HTTP Range header signature (sid: 6872).

  BitTorrent Protocol -- UDP Activity 1 [Reqs SID 5]
  BitTorrent Protocol -- UDP Activity 2 [Reqs SID 5]
  BitTorrent Protocol -- HTTP User-Agent (KTorrent) [Reqs SID 5]
  BitTorrent Protocol -- DNS Query 1 [Reqs SID 5]
  BitTorrent Protocol -- HTTP User-Agent 1 [Reqs SID 5]
  BitTorrent Protocol -- HTTP Activity 1 [Reqs SID 5]
  BitTorrent Protocol -- TCP Activity 1 [Reqs SID 5]
  BitTorrent Protocol -- TCP Activity 2 [Reqs SID 5]
  BitTorrent Protocol -- HTTP User-Agent (BitTorrent) [Reqs SID 5]
  BitTorrent Protocol -- UDP Activity 3 [Reqs SID 5]
  BitTorrent Protocol -- UDP Activity 4 [Reqs SID 5]
  BitTorrent Protocol -- HTTP Activity 2 [Reqs SID 5]
  BitTorrent Protocol -- HTTP Activity 3 [Reqs SID 5]
  BitTorrent Protocol -- TCP Activity 3 [Reqs SID 5]
  BitTorrent Protocol -- TCP Activity 4 [Reqs SID 5]
  BitTorrent Protocol -- TCP Activity 5 [Reqs SID 5]
  BitTorrent Protocol -- TCP Activity 6 [Reqs SID 5]
  BitTorrent Protocol -- HTTP User-Agent (qBittorrent) [Reqs SID 5]
  BitTorrent Protocol -- UDP Activity 5 [Reqs SID 5]
  BitTorrent Protocol -- DNS Query 2 [Reqs SID 5]
  BitTorrent Protocol -- DNS Query 3 [Reqs SID 5]
  BitTorrent Protocol -- HTTP User-Agent 2 [Reqs SID 5]
  BitTorrent Protocol -- HTTP Activity 4 [Reqs SID 5]
  BitTorrent Protocol -- UDP Activity 6 [Reqs SID 5]


Relevant Information