Re:Detecting Tor Communication in Network Traffic
by marshray on Saturday April 06, 2013 @07:52PM
(#5505519)
TL;DR: Tor is a peer-to-peer anonymity system providing TCP-like connections over SSL/TLS on TCP port 443.
Anonymity can be used for good. It can be used for evil. A botnet has been seen utilizing Tor.
There's a program called "Caploader" with a checkbox labeled "Identify protocols". Checking the box can identify traffic speaking the current vanilla Tor protocol.
Anonymity can be used for good. It can be used for evil. A botnet has been seen utilizing Tor.
There's a program called "Caploader" with a checkbox labeled "Identify protocols". Checking the box can identify traffic speaking the current vanilla Tor protocol.