> I have a troubles with a customer (his computer is continuously 
> sending/downloading) some data. Customer says he knows nothing about
> P2P network but its traffic contains thinks like:
> 
> /webcache/data/debug.84 HTTP/1.0 Host: ip2p.com User-Agent: 
> Mozilla/4.0 (compatible; Synapse)
> 
> Ip2P.com is a company which (probably) writes appliactions for P2P
> networks. Interesting is that there is Synapse mentioned in HTTP Agent
> name (rest of the communication if not HTTP oriented (TCP ports 8999
> and 9000 used).
> 
> Do you know any P2P client/network which is using Synapse?

No, I not know it. 

It seems to be HTTP based traffic, event it is on non-standard ports 
and transferring non-standard datas. Your user-agent string is 
default user-agent identification of my THttpSend class.

It can be probably any virus/malware/spyware too! We known first worm 
written by Synapse (Sircam) a five years ago. Sometimes I see Synapse 
signature in some e-mail SPAMs too. Synapse is very probably used by 
some malware... ;-(



-- 
Lukas Gebauer.

E-mail: [EMAIL PROTECTED]
http://synapse.ararat.cz/ - Ararat Synapse - TCP/IP Lib.


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
synalist-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/synalist-public

Reply via email to