Mailing List Archive: [nsp] matching/limiting kazaa v2

Mark, I've seen this too. A packet trace reveals a DNS lookup first
to webservice.musiccity.com

This may or may not restrict the ability to search though, if you
delete his host entry from your DNS.

Would you share your findings if you are able to contain this
traffic?

Thanks,
Rick Cheung
NPI IT Wan Team, CCNP

-----Original Message-----
From: Mark Pace Balzan [mailto:mpb@melitacable.com]
Sent: Thursday, October 17, 2002 12:52 PM
To: cisco-nsp@puck.nether.net
Cc: Mark Pace Balzan
Subject: [nsp] matching/limiting kazaa v2

Hi All,

As you may know the standard version of kazaa works on TCP port 1214.
This has also been included as a pdlm in cisco NBAR, as fasttrack

However as of a few weeks now, a new version of the kazaa software has been
launched (kazaa v2), which seemingly works on dynamic ports, and my attempts
at matching/blocking/limiting this traffic has been so far unsucessful.

Has any one on the list had any sucess or is working on this issue. I'd be
glad to contribute my findings so far.

Ive also contacted TAC to see if a new pdlm can be released for this. Still
waiting for an answer.

Thanks in advance

Mark

_______________________________________________
cisco-nsp mailing list real_name)s@puck.nether.net
http://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/