Home > Ask the Security Experts > Network Security Questions & Answers > What are the pros and cons of shaping P2P packets?
Ask The Security Expert: Questions & Answers
EMAIL THIS

What are the pros and cons of shaping P2P packets?

Mike Chapple EXPERT RESPONSE FROM: Mike Chapple

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 22 February 2008
An ISP was recently called out in the press for allegedly attempting to screen and in some cases block peer-to-peer traffic on its network. From a security perspective, what are the pros and cons of shaping P2P packets?

>
EXPERT RESPONSE
Packet shaping, a technique used to control computer network traffic, really isn't a security issue; it's a policy matter. The use of packet-shaping technology limits the amount of bandwidth that certain protocols (P2P, in this case) may consume. The practice is a commonly accepted one on commercial networks, as it limits the impact that users of such bandwidth-hogging protocols have on the shared network resource.

There is no law that requires ISPs to block P2P traffic or monitor the behavior of their users. In fact, the Digital Millennium Copyright Act provides what some have called a "safe harbor" for Internet Service Providers. The legislation protects ISPs from the behavior of their networks' users.

The disadvantages of packet shaping lie in two areas: customer relationships and costs. From a customer relationship perspective, packet shaping has the potential to anger clients unwilling to accept their ISP's decision regarding which traffic should and should not be rate-limited. In your question, you alluded to the recent allegations that Comcast blocked and rate-limited P2P traffic. This resulted in a national media frenzy that incurred a public relations cost likely so high that it exceeded any cost savings achieved by reducing bandwidth consumption. Additionally, packet shaping requires the addition of new technology to the infrastructure, increasing overhead and incurring costs related to equipment acquisition, policy maintenance, troubleshooting and monitoring.

More information:

  • A reader asks threat expert Ed Skoudis, "Is it possible to detect today's peer-to-peer (P2P) botnets?"
  • Learn more about the risks of P2P networks.


  • Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Network Security
    What warning signs will indicate the presence of a P2P botnet?
    What reporting tools are available for an enterprise IDS?
    Is it possible to allow select access to IP addresses using Windows Server 2003?
    Is an IPsec VPN necessary when connecting remote servers that process financial transactions?
    What are best practices for creating an IDS and maintaining a signature database?
    What are the best ways to hide system information from network scanning software?
    What are the security risks of opening all the ports on an internal router?
    Will Cisco's plan to open access to the IOS improve network security?
    Will VoIP attacks result in more than just spam?
    Should enterprises implement a mandatory iPhone VPN?

    Monitoring Network Traffic and Network Forensics
    Windows registry forensics: Investigating system-wide settings
    Product Review: Altor Networks' Virtual Network Security Analyzer (VNSA) 1.0
    Screencast: Catching network traffic with Wireshark
    Windows registry forensics guide: Investigating hacker activities
    More built-in Windows commands for system analysis
    Is security improved when the number of Internet gateways is reduced?
    Screencast: Using Nessus to scan for vulnerabilities
    Built-in Windows commands to determine if a system has been hacked
    How will the centralized logging of network flow data benefit an enterprise?
    The forensics mindset: Making life easier for investigators

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    computer forensics  (SearchSecurity.com)
    Einstein  (SearchSecurity.com)
    footprinting  (SearchSecurity.com)
    information signature  (SearchSecurity.com)
    intrusion detection  (SearchSecurity.com)
    network forensics  (SearchSecurity.com)
    port scan  (SearchSecurity.com)
    probe  (SearchSecurity.com)
    promiscuous mode  (SearchSecurity.com)
    snoop server  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    Targeted Security Channel Tips for Resellers, Integrators and Consultants
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts