PeerToPeerProtocols

---

P2P Whatch Dog has [packet recordings] of some p2p networks

Gnutella

Short Protocol Description
Known Clients

• none

Known Ports

• TCP: 6346 (default). 6347 and 6348 ar also possible values

Protocol Specs

• http://capnbry.net/gnutella/protocol.php
• http://www9.limewire.com/developer/gnutella_protocol_0.4.pdf

  Gives a good overview of the protocol, but doesn't provide any specs

• http://rfc-gnutella.sourceforge.net/developer/testing/index.html

Links'

• http://www.limewire.com/developer/
• http://www.gnutella2.com/
• http://en2.wikipedia.org/wiki/GDF

WinMX

What once was just another Napster/OpenNap client has evolved into it's own decentralized network. This network (WinMX Peer Network) seems to be similar to the structured (UltraPeer'ed) gnutella and Kazaa: a two-level mesh network.
Known Clients

• [WinMX]

Known Ports

• TCP 6699
• UDP 6257

Protocol Specs

• WinMX Peer Networking Protocol (WPNP)

  Closed Protocol, no specs available

• OpenNap (see bellow)

Links

• http://www.slyck.com/winmx.php
• http://homepage.ntlworld.com/j.buchanan/index.html?wpn.html

OpenNap

Original Napster protocol with some additions.
Known Clients

• WinMX
• See http://opennap.sourceforge.net/ for more

Known Ports

• No Known port usage

Protocol Specs

• Closed Protocol, no specs available

Links

• http://opennap.sourceforge.net/

FastTrack

Short Protocol Description
Known Clients

• Kazaa
• iMesh
• MLDonkey
• [gift]

Known Ports

• TCP 1214 (UDP too)
• Random ports ( 80 is commonly used for listenning ), including UDP. See gift docs bellow.

Protocol Specs

• Closed Protocol, no specs available

Links

• http://www.lowth.com/p2pwall/ftwall/
• http://home.hetnet.nl/~frejon55/ft/KazaaFileFormats.html
• http://home.hetnet.nl/~frejon55/
• http://en2.wikipedia.org/wiki/FastTrack
• http://www.p2pwatchdog.com/packet_fasttrack.html
• [Documentation of the known parts of the FastTrack protocol, from giFT-FastTrack]
• http://cs.nmu.edu/~randy/Classes/CS442/The_Kazaa_Protocol.html
• [Music industry uses vulnerability in Kazaa Hash Calculations]

SoulSeek

Short Protocol Description
Known Clients

• SoulSeek original client
• pyslsk and [nicotine]

Known Ports

• For server comm.

  TCP (local: any) -> (remote: 2240)

• For peer to peer comm.

  TCP (any -> 2234) or (any -> 2254)

Protocol Specs

• No specs available

Links

• ?

BitTorrent

Short Protocol Description
Known Clients

• [httpwww.bitconjurer.org Official]
• Many others availiable on www.sourceforge.net

Known Ports

• For server comm. ( tracker in this case )

  Usually TCP 6969 - others my be announced in the .torrent file

• For p2p comm.

  TCP 6881:6889 ( it's possible to use ports above 6889 )

Protocol Specs

• http://bitconjurer.org/BitTorrent/protocol.html
• http://wiki.theory.org/BitTorrentSpecification

Links

• http://62.216.18.38/bt_merkle/ << BT2-protocol and merkle trees
• http://www.bitcomet.com/doc/Specification.htm
• http://www.bitconjurer.org/BitTorrent/documentation.html
• http://wiki.theory.org/index.php/BitTorrentSpecification
• http://wiki.theory.org/index.php/BitTorrentFAQ

Manolito Network

Short Protocol Description
Known Clients

• none

Known Ports

• No Known port usage

Protocol Specs

• Closed Protocol, no specs available

Links

• http://www.slyck.com/mp2p.php

Edonkey, Kad and Overnet

See EdonkeyProtocol for more information on these protocols.
Known Clients

• The original
• Overnet client
• [emule] - C++/Windows
• [xMule] - C++/Unix (wxWindows)
• [aMule] - C++/Unix (wxWindows)
• [jMule] - Java
• mldonkey
• [lPhant] - C#/.Net

Known Ports

• For server comm.

  TCP 4661 (server)

  Basic server traffic: search for files, sources, users, receive 'call back' requests

  UDP 4665 (server)

  Souces and file queries, etc...

• For p2p comm.

  TCP (* -> 4662)

  For downloads, queries, etc.

  UDP (* -> 4672)

  For queries, emule extensions, etc

Protocol Specs

• See EdonkeyProtocol for more information on these protocols.

Links

• See EdonkeyProtocol for more information on these protocols.

Direct Connect

Short Protocol Description
Known Clients

• [DC++]

Known Ports

• Default is TCP & UDP 1412
• [mldonkey docs point to 4444] but i doubt it...

Protocol Specs

• Closed Protocol, no specs available

Links

• none

Earthstation5

Short Protocol Description
Known Clients

• none

Known Ports

• No Known port usage

Protocol Specs

• Closed Protocol, no specs available

Links

• none

Links to Other Protocolos

• http://outpostfirewall.com/guide/rules/preset_rules/p2p.htm
• http://www.p2pwatchdog.com/home.html
• http://www.jetiants.tk/

---

Document last modified Mon, 06 Dec 2004 03:01:08