[Snort-sigs] P2P Signature for Edonkey/Emule

O'Flynn, Derek DOFlyn at ...466...
Fri Jun 13 13:15:10 EDT 2003

Does anyone have a rule that can reset connections for Edonkey and Emule.
It appears the following ports are used.
TCP port 4661 to connect to the server. 
TCP port 4662 to connect to other clients. 
UDP port 4665 to send messages to servers other then the one you are
connected to.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20030613/78e5a896/attachment.html>

More information about the Snort-sigs mailing list