P2P: Kazaa File Hash Request

This signature detects Kazaa file requests using HTTP on non-standard ports. Current Kazaa versions attempt to evade firewalls by carrying HTTP-like traffic that uses embedded URI information and filename-hiding techniques. To use this signature, Attack Object, to block Kazaa traffic, set your rule action to "drop connection". NOTE: Because this signature is system-intensive and can severely affect network performance, use with caution.

References

URL: http://www.kazaa.com/

Short Name

P2P:KAZAA:FILE-HASH

Severity

Info

Recommended

False

Recommended Action

None

P2P: Kazaa File Hash Request

References

Found a potential security threat?