4 Aug
2008
4 Aug
'08
7:08 a.m.
On Tue, 2008-08-05 at 11:45 +1200, Shane Alcock wrote:
Long story short, over 40% of observed customer addresses accepted at least one incoming TCP connection over the time period we looked (around 4 consecutive days, including a weekend). This ratio grows to be more than 60% when UDP is also considered, although the counts for UDP aren't as reliable. Most of the incoming connections are on either well-known p2p ports or high-number ports, suggesting a lot of customers doing some form of p2p.
Is there any way to tell how many of those were actually desired by the customer, as opposed to their boxes being remote controlled via bots etc? Richard