Solved

Finding Torrent Downloader

Posted on 2011-02-11
5
563 Views
Last Modified: 2012-05-11
Our company received a letter from legal firm representing a medial compnay which was forwaed to us by out ISP. It seems someone in out LAN has been downloading copyright protected materials and has exposed our business to copyright infringment liability. Management is very interested in finding the computer/user responsible. What is the best way to do this without having to inspecte more than 70 computers.We use a Netgear RVS318 Router/Firewall
0
Comment
Question by:biztekadmin
  • 3
  • 2
5 Comments
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 34871145
You could use wireshark and see who is torrenting. You are sure they used torrents for that?
0
 

Author Comment

by:biztekadmin
ID: 34871836
I'm assuming a torrent downloader was used becasue I've had previous expiereince in a smaller environment, where someone left a Vuze instance downloading/seeding all weekend, by Friday of the next week we recieved a warning letter from out ISP. What other services / applications should Ibe looking for? As far as Wireshark, any suggestions on how to configure which network traffic to capture to determine who is downloading. Also will wireshark impact network performance? Thank You.
0
 
LVL 35

Accepted Solution

by:
Ernie Beek earned 500 total points
ID: 34871908
This should help you with wireshark: http://wiki.wireshark.org/BitTorrent

Wireshark shouldn't have an impact on performance, it just listens (to everything on the network).

Though torrent are widely used, you might also want to look at (for example) usenet traffic. That uses port 119 by default or port 563 for SSL connections.
0
 

Author Closing Comment

by:biztekadmin
ID: 34871979
Thank you really apreciate the help.
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 34872082
No problem, always glad to help :)
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Port 808 is being blocked 9 121
ISP Change 14 63
how to share a file to edit with dropbox? 3 27
Site cannot be reached ONLY when connected to modem 18 32
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question