Friday, August 6, 2010

Common Application Signatures for ISA 2004

.
Application
Location
HTTP header
Signature
MSN Messenger
Request headers
User-Agent:
MSN Messenger
Windows Messenger
Request headers
User-Agent:
MSMSGS
Netscape 7
Request headers
User-Agent:
Netscape/7
Netscape 6
Request headers
User-Agent:
Netscape/6
AOL Messenger (and all Gecko browsers)
Request headers
User-Agent:
Gecko/
Yahoo Messenger
Request headers
Host
msg.yahoo.com
Kazaa
Request headers
P2P-Agent
Kazaa
Kazaaclient:
Kazaa
Request headers
User-Agent:
KazaaClient
Kazaa
Request headers
X-Kazaa-Network:
KaZaA
Gnutella
Request headers
User-Agent:
Gnutella
Gnucleus
Edonkey
Request headers
User-Agent:
e2dk
Internet Explorer 6.0
Request headers
User-Agent:
MSIE 6.0
Morpheus
Response header
Server
Morpheus
Bearshare
Response header
Server
Bearshare
BitTorrent
Request headers
User-Agent:
BitTorrent
SOAP over HTTP
Request headers
Response headers
User-Agent:
SOAPAction
http://i.msdn.microsoft.com/Global/Images/clear.gif Other Parameters
This table provides other parameters that characterize applications...........

Application
Location
Type
Value
Kazaa
Headers
Request Header
X-Kazaa-Username:
X-Kazaa-IP:
X-Kazaa-SupernodeIP:
BitTorrent
Extensions
None
.torrent
Many peer-to-peer clients
Headers
Request Header
P2P-Agent

  Yahoo Messenger
============
Search in: Request headers
HTTP header: Host
Signature: msg.yahoo.com

-----------------------

Gtalk
====
Search in: Request headers
HTTP header: User-Agent:
Signature: Google Talk

---------------------
Window Live Messenger
============

Search in: Request headers
HTTP header: User-Agent:
Signature: Windows Live Messenger