Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-16 Thread Christian Biere
Bill Pringlemeir wrote: > Bill Pringlemeir wrote: > >> btw, Is "is_action_url_spam()" in search.c ready to be removed? > On 16 Jun 2007, [EMAIL PROTECTED] wrote: > > No, why would you want to remove it? >* This checks XML data appended to search results for action URL spam. It's >* a w

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-16 Thread Bill Pringlemeir
Bill Pringlemeir wrote: >> btw, Is "is_action_url_spam()" in search.c ready to be removed? On 16 Jun 2007, [EMAIL PROTECTED] wrote: > No, why would you want to remove it? /** * This checks XML data appended to search results for action URL spam. It's * a weak heuristic but it should b

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-16 Thread Christian Biere
Bill Pringlemeir wrote: > It was my understanding that "url_fix_escape()" would be applied to > the result. url_fix_escape() is only applied to URIs - from magnet-links for example. For /get/ requests, url_escape() is used. See downloads.c. > So when an embedded HTTP response was sent, it would b

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-16 Thread Bill Pringlemeir
> Bill Pringlemeir wrote: >> However, as noted the newline filtering should prevent this from >> happening with gtk-gnutella. On 15 Jun 2007, [EMAIL PROTECTED] wrote: > There's no newline filtering in gtk-gnutella as far as I can > tell. If it ever requests a file by its filename, the filename

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-15 Thread Christian Biere
Bill Pringlemeir wrote: > I know that I was operating passive filters that automatically > downloaded data during this time period. It wasn't the file > extensions that they talked about. It is possible that a gtk-gnutella > node could have downloaded these files. For instance, a gtkg user > mig

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-15 Thread Bill Pringlemeir
On 15 Jun 2007, [EMAIL PROTECTED] wrote: > And on a quirky note: The paper mentions a substantial number of > nodes that were simply downloading any file from their falsified > query results. I have a hard time imagining any but the most naive > Gnutella users from doing this, but I can think of

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-15 Thread Lloyd Bryant
>From: Bill Pringlemeir <[EMAIL PROTECTED]> >To: Haxe <[EMAIL PROTECTED]> >CC: gtk-gnutella-devel@lists.sourceforge.net >Subject: Re: [Gtk-gnutella-devel] Gnutella Query >Date: 14 Jun 2007 23:01:44 -0400 > > > On Friday 15 June 2007 01:29, Lloyd Brya

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-15 Thread Lloyd Bryant
>From: Haxe <[EMAIL PROTECTED]> >To: gtk-gnutella-devel@lists.sourceforge.net >Subject: Re: [Gtk-gnutella-devel] Gnutella Query >Date: Fri, 15 Jun 2007 02:05:34 +0200 > >On Friday 15 June 2007 01:29, Lloyd Bryant wrote: > > >How in hell would that be helpful

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-14 Thread Bill Pringlemeir
> On Friday 15 June 2007 01:29, Lloyd Bryant wrote: >> What this person is attempting to do is create a DDoS (Distributed >> Denial of Service) tool. Basically, take every query that is >> received by a given node, and reply to it showing a matching file >> on the machine that attacker wishes to

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-14 Thread Haxe
On Friday 15 June 2007 01:29, Lloyd Bryant wrote: > >How in hell would that be helpful for gnutella? > > It wouldn't. That was a rhetoric question :-) > What this person is attempting to do is create a DDoS > (Distributed Denial of Service) tool. Basically, take every query > that is received by

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-14 Thread Lloyd Bryant
>From: Haxe <[EMAIL PROTECTED]> >To: gtk-gnutella-devel@lists.sourceforge.net >Subject: Re: [Gtk-gnutella-devel] Gnutella Query >Date: Thu, 14 Jun 2007 04:54:17 +0200 > >On Thursday 14 June 2007 04:47, Farooq Butt wrote: > > please guide me regarding the modi

Re: [Gtk-gnutella-devel] Gnutella Query

2007-06-13 Thread Haxe
On Thursday 14 June 2007 04:47, Farooq Butt wrote: > please guide me regarding the modification of source of gnutella .. > as i want to implement a query hit scenario where gnutella shows a > strange behaviour ... it shows hits for every query giving IP address > of a single webserver ... resulting

[Gtk-gnutella-devel] Gnutella Query

2007-06-13 Thread Farooq Butt
Hi please guide me regarding the modification of source of gnutella .. as i want to implement a query hit scenario where gnutella shows a strange behaviour ... it shows hits for every query giving IP address of a single webserver ... resulting a flooding traffic for webserver ... I think that