RE: Can PS detect AIM file transfers?

["Bartholomew, Greg" <GBartholomew@newhaven.edu>]

I found the same thing. If I did a Never-Admit on Discovered Ports or
Default, AIM stopped working. I set both to a Rate of 2, has been under
control for the most part. Only catch is you have to have what matters
classified so they don't get hit by those class limits.

Problem hit me back in Sept when the new vers came out.

Greg Bartholomew
Director of Networking
University of New Haven
300 Orange Ave
West Haven, CT 06516
(203)932-7059
(203)932-7075 fax


-----Original Message-----
From: Edward Chase [mailto:echase@postoffice.providence.edu] 
Sent: Friday, January 24, 2003 11:48 AM
To: packeteer-edu@lists.Stanford.EDU
Subject: Can PS detect AIM file transfers?

Assuming that I did proper detective work on this, it appears that file 
transfers done through AIM get dumped into the Default classification.  Can 
any confirm or deny this?

I already have the AOL-IM-ICQ classification in place and I did have 
Auto-discovery turned on at the time that I was seeing abnormally high 
/Outbound/Default traffic.  No new traffic classes were showing up.  I 
found what machine outside of our network was listening to that 
traffic.  Looked at my firewall and saw which internal machine was talking 
to that outside machine.

I ended up contacting the student and she said she was doing AIM file 
transfers with an off campus friend.

Thoughts on this...?

Thanks.

---------------------------------------------------------------
  Edward F. Chase III     |   echase@providence.edu
  Providence College      |   http://www.providence.edu
  Computer Services       |   http://studentweb.providence.edu
  Providence, RI  02918   | 

-++**==--++**==--++**==--++**==--++**==--++**==--++**==--++**==--++**
This message was posted through the Stanford mailing list server. To
subscribe/unsubscribe, send email to majordomo@lists.stanford.edu
with "subscribe packeteer-edu" or "unsubscribe packeteer-edu" as the body.
Archive
is at http://www.stanford.edu/group/networking/netlists/
-++**==--++**==--++**==--++**==--++**==--++**==--++**==--++**==--++**
This message was posted through the Stanford mailing list server. To
subscribe/unsubscribe, send email to majordomo@lists.stanford.edu
with "subscribe packeteer-edu" or "unsubscribe packeteer-edu" as the body.  Archive
is at http://www.stanford.edu/group/networking/netlists/