P2P????

1
P2P????

• NetAgent

2
???P2P???

• WinMX?Winny???????????????
• ???????
• ????????
• ?????????DVD????
• ??????????
• ?????????
• ????ROM????

3
??????

• ???????? (??????)
• ???? (??)
• ?????????????
• ??(??)?? (??)
• Winny????????????????????????????????????

4
WinMX

• WinMX Peer ?OpenNap???????????????????????

5
WinMX?????

• ?????????
• ?? UDP 6257
• ?????? TCP 6699
• ????????
• ??????????????
• ???????????????QoS??????
• ?????????????????????

6
WinMX???????????????

• J-COM ZAQ Yahoo!BB ODN OCN SO-NET
  hi-ho

?????????????????? http//members.at.infoseek.co.j
p/ito0120/kaihi.html ????
7
WinMX????

• Snort?????
• ????????????????

alert tcp HOME_NET any -gt EXTERNAL_NET 6699
(msg"WinMX Download file" content"\" M"
offset20 classtypepolicy-violation rev1)
alert tcp HOME_NET any -gt EXTERNAL_NET any
(msg"WinMX Download file" content"\" M"
offset20 classtypepolicy-violation rev1)
PacketBlackHole IDS ??? http//www.packetblackhole
.com/ids.html ??
8
???????????????
PacketBlackHole grepShift-Jis/NetAgent
9
Winny

• Winny????????????????????????????BBS??????

10
Winny?????

• ?????????
• ??????????????????
• ?????????????????????????FTP passive??????????
• ????
• ????????????????????
• ????? TCP???
• ????TCP??????????
• ??????
• Port0

11
Winny????

• ???????????????
• ??????????????
• 1?????

12
?????

• ????????????????????
• ????Winny??????????

13
?????
Winny?????????NULL??
???????????????????
14
????????

• ???????????
• UP????
• ?????????

• ??????????????
• UP????
• ?????????

15
?????

• ??????????

_at_64515f2d03008c100f8c04920c24bdb82ca4
_at_17ea34a57df6a2f6a1047c6b4f06d0ff08083054f6
_at_2b86988d4ed185d36bdaf7f821685bd82de149743146
_at_92acb69f0dbbaa902530a1f11b195f99f17a98
_at_30a1a8f6e9c643152f5051117370eefecd
_at_9585aea4872b8cca49f7274a2d56e8aeb77816
_at_8831f8a322f6bd8cc91753a0ed3406faff57ff
_at_35c69ad64e4a20d9753bf9304715420a8b67ec8c27f8
_at_373a8d564173e8c74418b1b34a92c1c57f557912a868
_at_cb1bd4a7c67f5f08cb554ec9c8fe2436a0165d15
_at_36673d74b744c978cb45f26e17b1f9e567
_at_3439594b87d4b5d9966ee0294561a9c7d2
_at_9a7316f7d7122e7686bac3acc4049022436fe6
_at_e0bc5e79284a0087ff5a798a4f53bdd2a6a537
_at_ce5cd61271ff19ee87e6dc31c486c4142916029a
_at_3139360b072d17f666a431dffeaabd36d7
_at_905c2ddf25ea13363250b26541b11d3d4a2c99
_at_a4df8ddcc055f25212e3a6f3461b0d9987ef1d
_at_9e234484d86ca722137f32e5c93299273e62dc
_at_914a21238c813ceb9c5724581dd5 _at_4fd00dde764038d1a53
f516a28ac74f6fca7aa0a33697a2742262fac
_at_f1785467a2553993048ea4b1a9da708fc80ec4ab8f
_at_f1785767a2563d91048da7b4a9db788fcb00c6ae8f
_at_974cb8189cd966d97f29c8af333ff82289303a
_at_03a2104a01465a9ac2533dc85da4cc5d169260ec10
210.162.130.7119245 220.220.205.6927015 192.168.
116.22552 211.75.179.20910765 172.16.57.5128498
192.168.1.10225833 192.168.1.26074 43.244.160.4
832667 192.168.1.27747 192.168.1.211677 218.90.
191.1326298 192.168.0.327116 221.154.55.1881360
172.17.129.25358 218.121.80.5032718 61.214.65.5
412315 ??7805 211.199.229.2547851 192.168.1.21
7652 219.104.183.1133069 43.244.165.1769135 192.
168.116.232658 192.168.1.113298 218.141.62.9912
368
219.56.158.3424403 61.22.210.10029145 218.228.16
0.1624662 61.204.109.23731063 192.168.0.28366 y
2k.zive.net11903 81jthbwgpd.dyndns.org16198 220.
111.65.25118251 61.248.150.2088109 192.168.1.22
3223 61.116.191.2538765 61.214.24.1311419 218.41
.23.21025144 219.167.2.22823613 61.44.72.101907
1 192.168.1.1183241 192.168.0.27743 192.168.0.2
3466
16
????????????????

• firewall???????????????????????PORT0??????????????
  ???????????

17

• ?????????????
• ????????3-5-8 SOA??7F
• TEL [phone] FAX [phone]
• http//www.netagent.co.jp/