News for hackers. Stuff that matters.

A comment on Company withdrawing from Facebook as analytics show 80% of ad clicks from bots. Parent comment

Re:Company withdrawing from Facebook as analytics show 80% o... by biot on Monday July 30, 2012 @07:01PM (#4315149)
It works off of checking the SYN packet [0], which happens at the transport layer [1]. Once it gets to the application layer the information is not available unless the transport layer stores the information and provides a method to query a given connection.

[0] http://www.openbsd.org/faq/pf/filter.html#osfp

[1] http://en.wikipedia.org/wiki/OSI_model

[ Parent | on HN ]
Re:Company withdrawing from Facebook as analytics show 80% o... by dredmorbius on Monday July 30, 2012 @07:48PM (#4315295)
I suspected something like this, but was hoping enough of the signature might survive for a daemon (or Java class acting as one) to take a peek.
[ Parent | on HN ]