Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Since ipp2p hasn't been updated in 6 years and OpenDPI is no longer freely available (except within paid software from ipoque.com), it seems that nDPI from ntop is the only current DPI library available.

I need to block p2p and in the past was able to compile ipp2p into a kernal module and implement it using iptables. Does anyone know if its possible to use nDPI to filter p2p using iptables and if so, how can this be achieved?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

You can grab OpenDPI and opendpi-netfilter. It works on Debian 6 out of the box without a recompile. I'm looking to update netfilter to work with nDPI but will take some time.

Also here's a gist I found for QoS using OpenDPI and netfilter wrapper https:// gist.github.com/3161018.

share|improve this answer
    
We run CentOS and with some small mods we can compile the module but it wont load. Have you ever got it working on CentOS? –  Michelle Aug 1 '12 at 7:08
    
No, never got it to work on CentOS. –  FoamyBeer Aug 1 '12 at 14:52
    
Did you try and fail or never tried? Also, I'd be very interested in your opinion on how much better OpenDPI is than ipp2p at classifying P2P. Obviously encryption evades both of them but is OpenDPI significantly better? –  Michelle Aug 1 '12 at 16:57

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.