[98500] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Client information?

daemon@ATHENA.MIT.EDU (Peter Dambier)
Fri Aug 10 09:22:08 2007

Date: Fri, 10 Aug 2007 15:20:15 +0200
From: Peter Dambier <peter@peter-dambier.de>
Reply-To: peter@peter-dambier.de
To: nanog@merit.edu
In-Reply-To: <8c5ce24e0708092300h6ce445e7u763da1a34b58cfb@mail.gmail.com>
Errors-To: owner-nanog@merit.edu


Paul Atkins wrote:
> 
> Hello,
>  
> I am a network researcher. One question I want to ask the ISPs here are 
> that if they have a choice of finding more information about the hosts 
> that connect to them, is it something they will like to spend money on? 
> For example if the ISP can find out what applications is the host 
> running etc. would it be useful for the ISPs?
>  
> Thanks

I am not exactly an ISP.

Sometimes somebody is nocking at my door. If it sounds like they are
knocking with a pick and a hoe, I forget about good manners and ask
back with nmap.

Depending an what IASON and nmap are reporting I might give
botnet Gadi an email - but I dont take money for that sevice
nor is that so interesting I would pay money to know more.

And I see netbios ports open most of the time, so I guess it
must be windows mostly and the application is a bot.

The friendlier guys keep telling me their os and browser via the
html interface. If they disguise a Linux Konqeror as a Winows IE
that is no big problem.

Would it be useful for ISPs?

I guess yes. They might implement a non swimmers basin for the
windows people and a sharks only basin for the rest of us.

But I as a costumer would not want that. And paying money for
that "sevice" - beware.


Kind regards
Peter and Karin

-- 
Peter and Karin Dambier
Cesidian Root - Radice Cesidiana
Rimbacher Strasse 16
D-69509 Moerlenbach-Bonsweiher
+49(6209)795-816 (Telekom)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter@peter-dambier.de
mail: peter@echnaton.arl.pirates
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/
http://www.cesidianroot.com/


home help back first fref pref prev next nref lref last post