Olaf van der Spek
OvdSpek at LIACS.NL
Tue Jan 25 17:10:06 EST 2005
Martin Burggraf wrote:
> John Hoffman schrieb:
>>Without the tracker's verifying the source IP, or at least checking the
>>IP for an active BitTorrent client, it would be possible for an attacker
>>to insert an IP into very active torrents, causing a DDoS situation.
> How active should this swarm be?
> If a client tries to connect and doesn't get a response, it should delete the
> IP from it's internal list, so an IP without success is only tried once per
> Some of the most active torrents I've seen so far had about only 10000 peers,
> and usually not all peers try to connect at once. So there are _at_most_ 10000
> connections in about half an hour (until the tracker deletes the IP from it's
> list because there is no update). I don't think this is enough for a DDoS.
Why would the 'attacker' restrict himself to a single torrent (or a
single tracker) or only one 'announce'?
Yahoo! Groups Links
<*> To visit your group on the web, go to:
<*> To unsubscribe from this group, send an email to:
BitTorrent-unsubscribe at yahoogroups.com
<*> Your use of Yahoo! Groups is subject to:
More information about the BitTorrent