Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

Strange Bittorrent flood.

Name: Anonymous 2008-01-10 13:52

I've been experiencing some kind of BT bombardment from 86.67.117.226:6881, it sent lots of UDP packets (of length 102) like


0000  00 10 dc 66 66 66 00 0f  3d e9 fc 2b 08 00 45 20   ...fff.. =..+..E
0010  00 7a b2 62 00 00 70 11  c1 c9 56 43 75 e2 0a 00   .z.b..p. ..VCu...
0020  00 02 1a e1 1a e1 00 66  c4 81 64 31 3a 61 64 32   .......f ..d1:ad2
0030  3a 69 64 32 30 3a 39 f1  55 4b 61 3a 9e 14 fe b2   :id20:9. UKa:....
0040  a6 7c 8f 0f 23 dc a0 af  c5 03 39 3a 69 6e 66 6f   .|..#... ..9:info
0050  5f 68 61 73 68 32 30 3a  04 5c 46 ea 17 5f c8 4d   _hash20: .\F.._.M


0000  00 10 dc 66 66 66 00 0f  3d e9 fc 2b 08 00 45 20   ...fff.. =..+..E
0010  00 7a b2 65 00 00 70 11  c1 c6 56 43 75 e2 0a 00   .z.e..p. ..VCu...
0020  00 02 1a e1 1a e1 00 66  c3 81 64 31 3a 61 64 32   .......f ..d1:ad2
0030  3a 69 64 32 30 3a 39 f1  55 4b 61 3a 9e 14 fe b2   :id20:9. UKa:....
0040  a6 7c 8f 0f 23 dc a0 af  c5 03 39 3a 69 6e 66 6f   .|..#... ..9:info
0050  5f 68 61 73 68 32 30 3a  04 5c 46 ea 17 5f c8 4d   _hash20: .\F.._.M

As you can see, they differ only in some bytes, which are sequentially incremented/decremented.  How can I analyze BT traffic futher without writing the implementation?
My KTorrent replied thoughtfully to each packet (by replies of length 303) and thus got trolled enough to cease doing any useful traffic.
Could it be that French MPAA analog started Omg Cyberspace Warfare on Godawful Pirates?
Any ideas /prog/?

Name: Anonymous 2008-01-10 15:41

Flood them back and see what happens.

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List