ganeshran Posted February 9, 2012 Posted February 9, 2012 Throttling doesn't work on the latest version of clients. How? Throttling happens from the ISP side. If they identify P2P packets and throttle them how can clients stop that?
Prakat Posted February 9, 2012 Posted February 9, 2012 With message stream encryption (MSE) and Protocol encryption. This is available in BitComet, Flashget, uTorrent, Vuze and other popular clients. The Message Stream Encryption (MSE) protocol, which is used when running encrypted BitTorrent, is designed so that it should not be possible to detect the protocol by analysing the traffic. The reason is of course to make peer-to-peer (p2p) file sharing possible even when ISP's or Internet backbone operators are avtively trying to block or limit p2p traffic in their networks. The MSE protocol is very cleverly designed so that it behaves randomly, both in terms of flow behaviour (such as packet sizes) and in terms of application data. This makes it almost impossible to detect the MSE protocol with methods such as flow statistics, which normally includes statistical measurements of packet sizes and packet inter-arrival times. Michal Zalewski's Fl0p is one example of an application that uses flow statistics, but there are several other solutions designed for traffic classification that are making use of flow statistics. A probably more widespread method of detecting protocols is to make use of static protocol signatures (or patterns) in the initial application-layer data packets of a session. The L7-filter is probably the best known and most widely used open source signature based protocol identification implementation. But the L7-filter, and other simular implementations, stand no chance of detecting the MSE protocol since there are no static fields or well-known byte values at fixed offsets in the MSE data. There are, however, some distinctive properties that can be observed in the MSE protocol. Especially important is the initial Diffie-Hellman negotiation, which is performed first in each MSE session in order to establish a session encryption key. After a completed 3-way TCP handshake the client starts by sending a Diffie-Hellman public key (G^Xa mod P) and some padding to the server. The size of this data will always be in the range of 96 to 608 bytes, but it can be divided into several packets (often in data sizes around 100 bytes per packet). The server then responds with its Diffie-Helman public key (G^Xb mod P), which also is in the range of 96 to 608 bytes and can be divided into several TCP packets. The client then sends some data, in the range of 124 to 636 bytes, to complete the Diffie-Helman transaction and to choose a encryption algorithm for the rest of the TCP session. Some other apparent properties of the MSE protocol are: The transfered data is all randomly looking (i.e. has a high bitwise entropy), except for the case when "no encryption" is choosen as the encryption algorithm after the Diffie-Hellman exchange. High volumes of data and the data flows mostly in one direction in each individual session The first 96 bytes from both the client and server will never have a value higher than the modulus value (P), which is: 0xFFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1 29024E088A67CC74020BBEA63B139B22514A08798E3404DD EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245 E485B576625E7EC6F44C42E9A63A36210000000000090563 more here http://www.azureuswiki.com/index.php/Avoid_traffic_shaping#Escalation_of_the_crypto_settings
ganeshran Posted February 9, 2012 Posted February 9, 2012 With message stream encryption (MSE) and Protocol encryption. This is available in BitComet, Flashget, uTorrent, Vuze and other popular clients. more here http://www.azureuswiki.com/index.php/Avoid_traffic_shaping#Escalation_of_the_crypto_settings I use the Transmission client but Airtel is throttling Torrent traffic during day time in all of the commonly used clients including uTorrent. Torrent clients use specific ports for their communication and their traffic is of a different nature than usual HTTP. I think ISPs can use these to identify and shape P2P traffic even if the packets themselves are encryped and difficult to detect.
Prakat Posted February 9, 2012 Posted February 9, 2012 I use the Transmission client but Airtel is throttling Torrent traffic during day time in all of the commonly used clients including uTorrent. Torrent clients use specific ports for their communication and their traffic is of a different nature than usual HTTP. I think ISPs can use these to identify and shape P2P traffic even if the packets themselves are encryped and difficult to detect. Read the link fully, it details how common ISP algorithms are made ineffectual. Also, at the ISP end how will they know what port is being used in either peer machine? :hmmm:
bulbul Posted February 9, 2012 Posted February 9, 2012 Which is the Best client ? i use Bittorrent...
ganeshran Posted February 9, 2012 Posted February 9, 2012 Read the link fully' date=' it details how common ISP algorithms are made ineffectual. Also, at the ISP end how will they know what port is being used in either peer machine? :hmmm:[/quote'] I assume that ISP can check the port on the machine which traffic is being routed to. Though I am not an expert and dont know for sure. But the algorithms you mentioned are to check the nature of the packet and to find whether its P2P. My contention is that ISP can identify the nature of traffic and make a guess to throttle the speed. P2P involves a lot of connections to and from the machine which is not the case in regular browsing traffic. This is a response I found on Quora. Out of the detection techniques, the protocol you mentioned only changes the packet size, but the other two still happen. The fact that Airtel is able to throttle torrents during the day time despite most users using modern Torrent clients is evident of the fact that they are able to identify the traffic.
chainsmoker1985 Posted February 9, 2012 Posted February 9, 2012 ya in punjab there is ths issue but i wont change my connection i pay like 1200 + tax its perfect for me :P But I don't have any issue. I am actually getting more than what I deserve. Thats why i don't have any complaints against Airtel :--D
ganeshran Posted February 9, 2012 Posted February 9, 2012 ^ I think Airtel FUP limits arent enforced in areas where connection density is low. Initially In my area I got a 100 GB FUP but after 4-5 months later they started giving only the limit I paid for
Aaku Posted February 9, 2012 Posted February 9, 2012 10 gb. But honestly I have not experienced even a minor diff in the speed after completion of download limit. So I am continuously getting the same speeds even after 10 gbs. Maybe some technical issue from Airtel side but I don't have any problem :giggle: acha i have a limit of 75gb, wo bhi exceed hojata hai :)
Prakat Posted February 9, 2012 Posted February 9, 2012 I assume that ISP can check the port on the machine which traffic is being routed to. Though I am not an expert and dont know for sure. But the algorithms you mentioned are to check the nature of the packet and to find whether its P2P. My contention is that ISP can identify the nature of traffic and make a guess to throttle the speed. P2P involves a lot of connections to and from the machine which is not the case in regular browsing traffic. This is a response I found on Quora. Out of the detection techniques, the protocol you mentioned only changes the packet size, but the other two still happen. The fact that Airtel is able to throttle torrents during the day time despite most users using modern Torrent clients is evident of the fact that they are able to identify the traffic. While an ISP can do that technically (with scripts in the local router sending routine info back) it would need individual targeting or else they will just be clogging up their own network. And for that they will have to identify the users etc. which in itself is the task needed to accomplish. So essentially they will have to identify the users they want to identify in the first place. :D This is what the wiki entry has to say about the effectiveness of this method - Effectiveness Some ISPs are now using more sophisticated measures (e.g. pattern/timing analysis or categorizing ports based on side-channel data) to detect BitTorrent traffic. This means that even encrypted BitTorrent traffic can be throttled. However, with ISPs that continue to use simpler, less costly methods to identify and throttle BitTorrent, the current solution remains effective.[citation needed] Analysis of the BitTorrent protocol encryption (a.k.a. MSE) has shown that statistical measurements of packet sizes and packet directions of the first 100 packets in a TCP session can be used to identify the obfuscated protocol with over 96% accuracy[19]. http://en.wikipedia.org/wiki/BitTorrent_protocol_encryption Unfortunately for you Airtel is uptodate, however other users with lazier ISPs might be getting away with it.
Old guy Posted February 9, 2012 Posted February 9, 2012 acha i have a limit of 75gb' date=' wo bhi exceed hojata hai :)[/quote'] i download 8 gb 1080p for good movies.. and 4-6 720p for ok ones mera upload/download mila ke shayad 1 week main khatam jo jata hai :P
Old guy Posted February 9, 2012 Posted February 9, 2012 ^ I think Airtel FUP limits arent enforced in areas where connection density is low. Initially In my area I got a 100 GB FUP but after 4-5 months later they started giving only the limit I paid for ya thats why im not touching my connection .. dont wanna lose it :(( i exceed 120 gb easily
ganeshran Posted February 9, 2012 Posted February 9, 2012 Unfortunately for you Airtel is uptodate, however other users with lazier ISPs might be getting away with it. :mad: Just my luck. But I download torrents mostly at night anyways so throttling isnt an issue yet. Plus with a 400+ KBps download,2-3 hours a day is enough to exceed 75 GB.
Sir john Posted February 9, 2012 Author Posted February 9, 2012 I got it which foreign channel they show.
ganeshran Posted February 9, 2012 Posted February 9, 2012 which foreign channel they show. I can recall 2 CBS channels, Spark, FX, Fox Crime , Star world, AXN and the movie channels
.svg.png.5ab3ce86b8af4a762132502c85a350db.thumb.png.8a4574a4556391f1df10aa68196a2ab0.png)
Recommended Posts