Re: [Snort-users] Detecting Skype: anyone know how "Tom Online" do it?

On Thu, 27 Apr 2006, Jason Haar wrote:

| According to http://tinyurl.com/p7umu, "Tom Online" is the Skype partner
| in China whose product is able to do word filtering on Skype traffic -
| i.e. to be able to block Skype chats containing "illegal" words.
| 
| As Skype traffic is supposed to be AES encrypted, that sounds rather
| spectacular.
| 
| Does anyone have other details on this? Have they reverse-engineered it,
| and can we take advantage of such information with snort? ;-)

Hi,

When I first read your post I thought it meant detecting certain words 
when *spoken* via skype - which would be kinda tricky, encrypted or not!

Now I see this refers to the instant (text) messaging which skype calls "chat".

I suspect the censorship refered to in the article involves the collusion 
of skype.com themselves, who (it would seem) are able to decrypt the text 
message chat.


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users