[BitTorrent] ipv6

Olaf van der Spek OvdSpek at LIACS.NL
Tue Jan 25 17:10:06 EST 2005

Martin Burggraf wrote:
> John Hoffman schrieb:
>>Without the tracker's verifying the source IP, or at least checking the 
>>IP for an active BitTorrent client, it would be possible for an attacker 
>>to insert an IP into very active torrents, causing a DDoS situation.
> How active should this swarm be?
> If a client tries to connect and doesn't get a response, it should delete the 
> IP from it's internal list, so an IP without success is only tried once per 
> client.
> Some of the most active torrents I've seen so far had about only 10000 peers, 
> and usually not all peers try to connect at once. So there are _at_most_ 10000 
> connections in about half an hour (until the tracker deletes the IP from it's 
> list because there is no update). I don't think this is enough for a DDoS.

Why would the 'attacker' restrict himself to a single torrent (or a 
single tracker) or only one 'announce'?

Yahoo! Groups Links

<*> To visit your group on the web, go to:

<*> To unsubscribe from this group, send an email to:
    BitTorrent-unsubscribe at yahoogroups.com

<*> Your use of Yahoo! Groups is subject to:

More information about the BitTorrent mailing list