Official eMule-Board: Poisoned Files: Are We Too Trusting? - Official eMule-Board

Jump to content

  • (5 Pages)
  • +
  • 1
  • 2
  • 3
  • 4
  • 5
  • You cannot start a new topic
  • You cannot reply to this topic

Poisoned Files: Are We Too Trusting? I have watched my shared files being actively poisoned by fake users Rate Topic: -----

#41 User is offline   Wulp 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1785
  • Joined: 08-July 05

Posted 09 October 2009 - 04:30 PM

I actually wanted to know if the hashset and aich hash have correctly been taken over by your downloading testing client which can be confirmed in filedetails (rightklick on download, show details, "General" tab.) I suppose it is the case, but just wanted to be sure.

I furthermore indicated that (and if I am not mistaken here) your testing client might be unable to get the AICH hashset of a corrupted chunk, which may occur in case all sources are malicious and your uploading client is offline. In this case however you would never be able to obtain the file anyway.
Did you check your downloading client if there are any entries about AICH having recovered corrupted parts?

Finally I find you're pretty much exaggerating by saying they have "broken the system". The worst thing what happened is that your bandwidth was wasted, which is a bad thing of course, no doubt here. But it does not mean the end of the world nor the network.
1

#42 User is offline   WentloogWhix 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-October 09

Posted 09 October 2009 - 05:29 PM

View PostWulp, on 09 October 2009 - 05:30 PM, said:

I actually wanted to know if the hashset and aich hash have correctly been taken over by your downloading testing client.


I confirm that it has. I thought I had clarified this last time.

ed2k://|file|PoisonedFile.zip|237630536|C1DC8795FB69420D61DB3255B6C98CF8|p=47246BCD6DAC134B9ED53E14A7CE11E5:4E5A9300DCBDB704A875D3E9CE3DA8C6:6E96BFF4D5D053180BCC87F7EB1B4243:01EABB5A939605DB5346B6E8A35E9881:B1DE92AB6F491955B66763B1507DDC67:78D8D9329AB7504C224FD3D7E8AF4078:E3FEAABC9C543EAA092EEBCEE354315D:612E0A2207BDDC5369C9AC2883EFD57E:8FFEA0E8A6B15BD5B8A8280605E0D303:1210C44FC8FE5E40FF539CC562685C94:1BD9EED4802DE9FFBDCEAF5EEFDC952D:F506D3350CF1A835490C5A747E9FFD01:891F7FB985524793179670C2AF94FA98:E3EEAF00724B4E30A2BD603A855C0093:BDAF47741C231EDEBBFCDAEEEDDC06D1:EEE015735CDE14E225F832B66D638657:5A9B7188C723D020D9AAF4B661596234:6296FC08E2800683D5633775F425D3F9:F069FAE8FD22AB96A858BA68DC9C5445:53B82E0BECB1CF10357C9894DEE82160:71D33F031003B4FFE056F9CB54EEE980:C8B0BEEF31B1565B24DF884E9C2907D2:604A538A803697B4CCAE4029EC32EAD6:35E1FDF2C85085CD6D11505FA5EE3434:FDB001AC5A8EBE10D94BE3D7DC3AB3F3|h=WJHW2DVGBUVJYSHKP3BQHN3PWMSLTHLP|/


There is NO complete source for this file: I can absolutely guarantee it. I am the only source and I can't run eMule for the next 2 weeks because I have used up my bandwidth quota running all these tests.

Try it for yourself, and see how the rogue software works. Then see if the fuss is for nothing or not.

Edit: I have read and understand the forums rules:

Quote

2. No References to Illegal Content Allowed

General or specific references to any illegal content are not allowed. This includes: ed2k links, links to sites which host such content, and graphics which show these materials. Violation of this rule will result in the references being removed and the user warned and/or immediately banned. Direct or indirect promotion of copyright violations is not tolerated and posts WILL be removed.


The content in the file linked to is not illegal. You will not be able to download any copyrighted material in this file, irrespective of the file name, search results or implications to the contrary. There is no ban on ed2k links per se, only ones to illegal content.

This post has been edited by WentloogWhix: 09 October 2009 - 08:42 PM

So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.
from Vulnerability Assessment Security Maxims

For a Secure VPN option (instead of an insecure proxy), try ItsHidden ($10/mo). And check out PeerBlock for extra (free) protection against the bad guys.

Posted Image

I will donate EUR100 to the first version/mod of eMule that can successfully stop a poisoning attack, and allow me to block/distrust/ignore users from sending me stuff, and allow me to block/prevent them from receiving stuff, and not permit users to take or send partial chunks of data.

Until this happens, or until the corruption handling works correctly, please add the following to your IP Filter (ipfilter.dat):
84.128.0.0      - 84.135.255.255  ,   0 , Poison, Deutsche Telekom AG
85.176.0.0      - 85.182.127.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.228.0.0      - 92.231.255.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.192.0.0      - 92.223.255.255  ,   0 , Poison, QSC AG
78.48.0.0       - 78.50.159.255   ,   0 , Poison, HanseNet Telekommunikation GmbH

With apologies to the legitimate users of these ISPs who are being unfairly tarred with the same brush as the bad guys.
1

#43 User is offline   fox88 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 2034
  • Joined: 13-May 07

Posted 10 October 2009 - 08:50 AM

View PostWentloogWhix, on 09 October 2009 - 09:29 PM, said:

Edit: I have read and understand the forums rules
Have you really understood? Why do you think there are trobles with your file?
Should the contents be safe and legal you could complain to ISPs where bad clients operate, because disrupting network operations is not legal too. Would you try? :P

Properly updated IP filter should do the trick for this time. Not your tiny one; try to go to bluetack.com and report there your trouble with corrupted contents senders.

Now the facts.
All those peers have bad or disabled identification. Does not this make use of AICH impossible?
Symbol of key appears for a short time only, but details show obfuscation as enabled.
Most of those peers change name once an hour; user hash is not chnaged because uploaded amount for current session keeps growing.
All of them report QR around 120, though on the next reask they start uploading. Typical upload: speed - 3-11KByte/s, time - 20-70s, payload 100-230KByte, upload terminates with the message:

Quote

Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs)

Due to small amount of each upload, a few parts may get spoiled; and there's no single peer to blame for corruption.
0

#44 User is offline   Famerlor 

  • also known as Spike2
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 551
  • Joined: 16-October 04

Posted 10 October 2009 - 11:22 AM

@Wentloog: Could you answer my last post ?
Posted Image

You want a light mod with source-dropping, Powershare and WiZaRd's ClientAnalyzer ?
Try Spike2-Mod !

You rather want to stick to official eMule but don't want to miss all the new fixes and optimizations from the mods ?
Try OfFixed-Mod !
0

#45 User is offline   Andu 

  • Morph Team
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 12735
  • Joined: 04-December 02

Posted 10 October 2009 - 06:26 PM

I have another question. Is it even allowed to mess around with the ban thresholds? I'm just asking for curiosity's sake.
Three Rings for the Elven-kings under the sky,
Seven for the Dwarf-lords in their halls of stone,
Nine for Mortal Men doomed to die,
One for the Dark Lord on his dark throne
In the Land of Mordor where the Shadows lie.
One Ring to rule them all, One Ring to find them,
One Ring to bring them all and in the darkness bind them
In the Land of Mordor where the Shadows lie.


Dark Lord of the Forum


Morph your Mule

Need a little help with your MorphXT? Click here

0

#46 User is offline   James R. Bath 

  • Magnificent Member
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 360
  • Joined: 02-August 04

Posted 12 October 2009 - 03:15 AM

In a way, eMule is too trusting. It does appear to be something specific that can be fixed, incomplete parts via "remote client decided to stop/complete the transfer (got OP_OutOfPartReqs)" where the file hashing is circumvented, not that the file hashing itself is bad or poisoned.

I checked this out (using kad only in the Morph mod) and can confirm that even if "poison" is not an accurate description, there is a lot of poop flinging :shock: going on that should be identified with anti-p2p or fake file sharing. Worse, the clients sharing don't get banned at all. It just repeats over and over endlessly. A smart user (or a smart eMule client if it existed) will see from the proportion of transferred to completed that something is very wrong.

eMule really does need a tweak or new feature. The files referenced earlier are fakes, or at least effectively useless, so the links can remain for anyone interested.

In general, it works like this: the files never complete. The group of clients that say they have them appear to be multi-sourced, 100% complete, and the clients ID as the standard 49c. The files are also marked with quality ratings that indicate they should be good. No other user ever completes a DL, so they can't mark it differently.

In more detail, each client transfers roughly 200k at a time and than disconnects, and this repeats without stop or even a temporary ban. It looks like this via the logs:
date time: Download session started. User: ip 'user name' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
date time: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: ip 'user name' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 51 secs, Payload: 212.29 KB, Transferred: 212.29 KB, Req blocks not yet completed: 2.

Each client in the group does this roughly every 3 minutes and eMule just keeps on swallowing. The amount transferred increases, the completed jumps around but never enough to be displayed under Shared Files (so at least something in the Shared Files program loop is identifying there's something wrong).
date time: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: ip 'user name' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 30 secs, Payload: 61.66 MB, Transferred: 152.88 KB, Req blocks not yet completed: 2.


More concerning is their ability to do the same thing with actual, non-fake files. I have a verbose log of my transfers so anyone who wants to see the details (which did end up involving some copyrighted files to test how effective their "poison" was) can ask. One of the things that concerned me is they marked good MP3s as fake and made them actually appear to be RAR (under the General tab in details, it says file has wrong extension). I suppose eventually that might have corrected as I got good chunks from authentic sharers, but an easier way was to find the same MP3 files on bittorrent, DL them, and see if the hashes matched. They did, so rather than transferring over 2 times the size of the files in order to complete them (which is what happened with another actual file they share), I got it from, to complete the indignity, a bittorrent source very fast and with no corrupt/fake parts/blocks.
1

#47 User is offline   WentloogWhix 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-October 09

Posted 12 October 2009 - 07:39 PM

View PostFamerlor, on 10 October 2009 - 12:22 PM, said:

@Wentloog: Could you answer my last post ?

Regrettably I cannot, because I removed the installation and put eMule 0.49c back, waiting for fox88's suggestions on a "valid" or "suitable" IPfilter. I should have been more patient, I'm sorry.

I enabled all the extra anti-corruption stuff and set a limit to 5% corruption, but I can't recall what it was called, and I'm not sure how to list all the settings.

I suggest you try downloading the file and see what happens. I have used up all my bandwidth, so I can't run any more tests for two weeks. I have wasted nearly a GB of bandwidth on corrupt stuff, and since I am paying around US$12 per GB, it's an expensive hobby. I only download what I cannot legitimately buy.
So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.
from Vulnerability Assessment Security Maxims

For a Secure VPN option (instead of an insecure proxy), try ItsHidden ($10/mo). And check out PeerBlock for extra (free) protection against the bad guys.

Posted Image

I will donate EUR100 to the first version/mod of eMule that can successfully stop a poisoning attack, and allow me to block/distrust/ignore users from sending me stuff, and allow me to block/prevent them from receiving stuff, and not permit users to take or send partial chunks of data.

Until this happens, or until the corruption handling works correctly, please add the following to your IP Filter (ipfilter.dat):
84.128.0.0      - 84.135.255.255  ,   0 , Poison, Deutsche Telekom AG
85.176.0.0      - 85.182.127.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.228.0.0      - 92.231.255.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.192.0.0      - 92.223.255.255  ,   0 , Poison, QSC AG
78.48.0.0       - 78.50.159.255   ,   0 , Poison, HanseNet Telekommunikation GmbH

With apologies to the legitimate users of these ISPs who are being unfairly tarred with the same brush as the bad guys.
0

#48 User is offline   WentloogWhix 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-October 09

Posted 13 October 2009 - 06:03 AM

View Postfox88, on 10 October 2009 - 09:50 AM, said:

Should the contents be safe and legal you could complain to ISPs where bad clients operate, because disrupting network operations is not legal too.

Since when was publishing rubbish illegal on the internet? What EU or German law has been broken, and how was the ISP terms of service violated? Perhaps I could say they are violating my right to free speech. I think "disrupting network operations" is going to be difficult to prove or justify unless I can point to a TOS violation.

View Postfox88, on 10 October 2009 - 09:50 AM, said:

Properly updated IP filter should do the trick for this time. Not your tiny one; try to go to bluetack.com and report there your trouble with corrupted contents senders.

@fox88: I am still waiting for your definitive ipfilter.dat URL, and you still haven't explained why I would want to block the ADSL pool range for 3 ISPs, or whether the IP addresses I supplied are included in your IP Filter.

View Postfox88, on 10 October 2009 - 09:50 AM, said:

Have you really understood? Why do you think there are trobles with your file?

Actually I understand more than you seem to be willing to concede. I have been working on the idea of publishing my original content on the ED2K and KAD networks, but have held back because I don't think the model is reliable enough for publishing purposes, and certainly not for any kind of business model, other than advertising. Now this poisoning development has appeared, and I could jump to any number of conclusions about the reasons for the targeting of these particular files.

Based on pure speculation (and no actual facts) I could conclude that it is anti P2P initiated by the copyright holders acting on behalf of Dan Brown's audiobook publishers. Or it could be the Freemasons upset about the contents of his latest book. Or it could be anarchists having fun with a popular title. Or it could be an anti-Christian or anti-religion lobby. Or it could be a group of hackers perfecting the technique so they can sell their rogue software to the highest bidder. My personal favourite it that it is a concerned literary circle trying to get rid of badly written novels.

Unfortunately the only real conclusion that I can draw is that eMule as a client is unable to distinguish between real and poisoned files in any meaningful or useful way, and that it is too trusting and relies on infinite bandwidth.

This post has been edited by WentloogWhix: 13 October 2009 - 06:07 AM

So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.
from Vulnerability Assessment Security Maxims

For a Secure VPN option (instead of an insecure proxy), try ItsHidden ($10/mo). And check out PeerBlock for extra (free) protection against the bad guys.

Posted Image

I will donate EUR100 to the first version/mod of eMule that can successfully stop a poisoning attack, and allow me to block/distrust/ignore users from sending me stuff, and allow me to block/prevent them from receiving stuff, and not permit users to take or send partial chunks of data.

Until this happens, or until the corruption handling works correctly, please add the following to your IP Filter (ipfilter.dat):
84.128.0.0      - 84.135.255.255  ,   0 , Poison, Deutsche Telekom AG
85.176.0.0      - 85.182.127.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.228.0.0      - 92.231.255.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.192.0.0      - 92.223.255.255  ,   0 , Poison, QSC AG
78.48.0.0       - 78.50.159.255   ,   0 , Poison, HanseNet Telekommunikation GmbH

With apologies to the legitimate users of these ISPs who are being unfairly tarred with the same brush as the bad guys.
0

#49 User is offline   GilesBathgate 

  • Dependable Member
  • PipPipPipPip
  • Group: Members
  • Posts: 145
  • Joined: 08-May 08

Posted 15 October 2009 - 01:40 PM

I get my ipfilter from bluetack http://blocklistpro....ter/ip-filters/ (pipfilter.dat.gz)

It does seem sensible to ban clients that send you data which doesn't check out against the AICH hashset, but I think emule already does this, although I speculate that it bans on a userid level, rather than an IP level. Of course this rogue software you mention could be using a Sybil attack, to effectively whitewash its userid.

Most of the advice given you so far seems to be to ban clients on the IP level.
Howver, if you did ban on the IP level, people can still change their IP address quite easily when they have a dynamically assigned IP.

Personally I think the only real solution to these type of problems is the distributed trust model based on R-Chains that Paco Bell was talking about Here

This post has been edited by GilesBathgate: 15 October 2009 - 02:12 PM

2

#50 User is offline   Wulp 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1785
  • Joined: 08-July 05

Posted 15 October 2009 - 02:50 PM

I tried your testfile and it seems that it happens like I supposed, eMule detects corruptions but there is no genuine source so eMule can't retrieve the AICH hashset nor download any non-corrupted data from a good source.

From the Verbose Log: "Unable to request AICH Recoverydata because found no client who supports it and has the same hash as the trusted one"

Would be interesting to see if it works when you as a genuine source were online.
I wouldn't mind to try again as soon as you have some bandwidth available in order to be able to offer the file.

This post has been edited by Wulp: 15 October 2009 - 02:54 PM

1

#51 User is offline   James R. Bath 

  • Magnificent Member
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 360
  • Joined: 02-August 04

Posted 15 October 2009 - 03:19 PM

View PostFamerlor, on 09 October 2009 - 02:06 PM, said:

@Wentloog: Which setting did you enter for "CorruptionBlackBox-ban-Threshold" in the "Security Options"-page in Spike2mod ?

6. I tested with some of the files being corrupted. Even after setting the CorruptionBlackBox-BanThreshold to 6 (after seeing larger settings were having no impact), it wasn't stopping or banning the clients even after 9+ hours. I had at least 2 clients upload as much as 70+ MB of corrupt data during the session. The files were each about 123 MB, real, not fake, with valid sources sharing them, and neither completed after each transferred over 5 times their size.

I like the idea, but however you programmed it doesn't work for this. As an example, from one of the clients repeatedly sending corrupt blocks, It logged this, but did nothing about it:
AICH hash received from ip 84.135.x.x which already sent another hash (happend 18 times so far)
Apparently there's no limit:
AICH hash received from ip 85.181.x.x which already sent another hash (happend 38 times so far)
I think there's a more effective way to go about it:
http://forum.emule-p...howtopic=147161

This post has been edited by James R. Bath: 15 October 2009 - 03:22 PM

1

#52 User is offline   WentloogWhix 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-October 09

Posted 15 October 2009 - 06:43 PM

View PostWulp, on 15 October 2009 - 03:50 PM, said:

I tried your testfile and it seems that it happens like I supposed, eMule detects corruptions but there is no genuine source so eMule can't retrieve the AICH hashset nor download any non-corrupted data from a good source.

From the Verbose Log: "Unable to request AICH Recoverydata because found no client who supports it and has the same hash as the trusted one"


@Wulp: Which version of eMule are you using, and with what mods? The standard "out of the box" eMule 0.49c didn't display this message and was happy to download the file using the full hashset supplied.
So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.
from Vulnerability Assessment Security Maxims

For a Secure VPN option (instead of an insecure proxy), try ItsHidden ($10/mo). And check out PeerBlock for extra (free) protection against the bad guys.

Posted Image

I will donate EUR100 to the first version/mod of eMule that can successfully stop a poisoning attack, and allow me to block/distrust/ignore users from sending me stuff, and allow me to block/prevent them from receiving stuff, and not permit users to take or send partial chunks of data.

Until this happens, or until the corruption handling works correctly, please add the following to your IP Filter (ipfilter.dat):
84.128.0.0      - 84.135.255.255  ,   0 , Poison, Deutsche Telekom AG
85.176.0.0      - 85.182.127.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.228.0.0      - 92.231.255.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.192.0.0      - 92.223.255.255  ,   0 , Poison, QSC AG
78.48.0.0       - 78.50.159.255   ,   0 , Poison, HanseNet Telekommunikation GmbH

With apologies to the legitimate users of these ISPs who are being unfairly tarred with the same brush as the bad guys.
0

#53 User is offline   fox88 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 2034
  • Joined: 13-May 07

Posted 15 October 2009 - 07:17 PM

View PostWentloogWhix, on 15 October 2009 - 10:43 PM, said:

The standard "out of the box" eMule 0.49c didn't display this message and was happy to download the file using the full hashset supplied.
Standard eMule contains this message.
0

#54 User is offline   WentloogWhix 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-October 09

Posted 15 October 2009 - 10:25 PM

View Postfox88, on 15 October 2009 - 08:17 PM, said:

View PostWentloogWhix, on 15 October 2009 - 10:43 PM, said:

The standard "out of the box" eMule 0.49c didn't display this message and was happy to download the file using the full hashset supplied.
Standard eMule contains this message.

I stand corrected: the message is displayed in the verbose log but the download proceeds anyway. Weird.

@fox88: you still haven't answered the question about your IPfilter.dat file or the server.met file, so should I abandon my fresh installation of eMule 0.49c?
So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.
from Vulnerability Assessment Security Maxims

For a Secure VPN option (instead of an insecure proxy), try ItsHidden ($10/mo). And check out PeerBlock for extra (free) protection against the bad guys.

Posted Image

I will donate EUR100 to the first version/mod of eMule that can successfully stop a poisoning attack, and allow me to block/distrust/ignore users from sending me stuff, and allow me to block/prevent them from receiving stuff, and not permit users to take or send partial chunks of data.

Until this happens, or until the corruption handling works correctly, please add the following to your IP Filter (ipfilter.dat):
84.128.0.0      - 84.135.255.255  ,   0 , Poison, Deutsche Telekom AG
85.176.0.0      - 85.182.127.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.228.0.0      - 92.231.255.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.192.0.0      - 92.223.255.255  ,   0 , Poison, QSC AG
78.48.0.0       - 78.50.159.255   ,   0 , Poison, HanseNet Telekommunikation GmbH

With apologies to the legitimate users of these ISPs who are being unfairly tarred with the same brush as the bad guys.
1

#55 User is offline   WentloogWhix 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-October 09

Posted 15 October 2009 - 10:36 PM

View PostWulp, on 15 October 2009 - 03:50 PM, said:

Would be interesting to see if it works when you as a genuine source were online.
I wouldn't mind to try again as soon as you have some bandwidth available in order to be able to offer the file.

Just to clarify:
I have not shared the file since my initial post to this forum (Posted 04 October 2009). Other members who have downloaded the corrupt file, as well as my efforts on the test machine, were done only using the ed2k hashset that I posted. All the screen shots that I posted were done without the complete file.

I will not be posting the complete file. Ever. I made this undertaking in a previous post. What's the point of sharing a file that you know is being poisoned?

FWIW, I normally use BlockList Manager to create my ipfilter.dat file (currently 46263 IP filters) as well as running PeerBlock, which claims to be blocking 758226016 IPs. However since these are not included in the eMule installation files, nor are they mentioned in the setup guides, I have not used them on the test machine since the idea is to replicate the setup of a "normal/standard" user.
So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.
from Vulnerability Assessment Security Maxims

For a Secure VPN option (instead of an insecure proxy), try ItsHidden ($10/mo). And check out PeerBlock for extra (free) protection against the bad guys.

Posted Image

I will donate EUR100 to the first version/mod of eMule that can successfully stop a poisoning attack, and allow me to block/distrust/ignore users from sending me stuff, and allow me to block/prevent them from receiving stuff, and not permit users to take or send partial chunks of data.

Until this happens, or until the corruption handling works correctly, please add the following to your IP Filter (ipfilter.dat):
84.128.0.0      - 84.135.255.255  ,   0 , Poison, Deutsche Telekom AG
85.176.0.0      - 85.182.127.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.228.0.0      - 92.231.255.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.192.0.0      - 92.223.255.255  ,   0 , Poison, QSC AG
78.48.0.0       - 78.50.159.255   ,   0 , Poison, HanseNet Telekommunikation GmbH

With apologies to the legitimate users of these ISPs who are being unfairly tarred with the same brush as the bad guys.
0

#56 User is offline   Wulp 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1785
  • Joined: 08-July 05

Posted 16 October 2009 - 01:12 AM

Seems you misunderstood me here. First, you should thoroughly read the AICH description, especially the part about recovering. I don't ask you to upload the file but just to be online, so that there is a genuine source again and so you can see that AICH does work (I hope ;) ).

AICH needs at least one genuine/non-malicious source from which it can retrieve the recovery data (the AICH block hash set) in order to detect a corrupted block and eventually ban the malicious sender.
In your scenario though there's currently no genuine source. And that's the reason why AICH cannot work.
This is however a very rare case: An originally genuine file mostly has some genuine sources.
As long as this is the case plus a downloader has the correct AICH root hash some additional "poisoning" clients should not be a big problem (leaving out other possible problems for now mentioned in this thread).

The reason why it doesn't work in your case is because your UL client, the only genuine source, is offline so your DL client can't retrieve the recovery data.

Why don't you try out yourself? Go online again and make sure your DL client has your UL client as a source. Then, in case a corruption is detected, check the Log (and Verbose Log) whether AICH was able to do anything.
You don't really need to upload, you just need to be there..

This post has been edited by Wulp: 16 October 2009 - 01:24 AM

0

#57 User is offline   WentloogWhix 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-October 09

Posted 16 October 2009 - 03:19 PM

I have read the Corruption Handling post, and it seems to me that my initial guess was correct.

Trusting the Root Hash said:

The best thing is downloading from a link with a Root Hash. Assuming that the source of this link is trustworthy the Root Hash is trusted at once and saved to disk for this file.
If no Root Hash is provided in the link eMule has to trust the Root Hash, which the sources for the file send. It only trusts a Root Hash if at least 10 different sources send the same value and if at least 92% of all sources agree to this value. Because this Root Hash is not as trustworthy it is only valid for the current session and does not get saved nor can links with Root Hash be created.
Once eMule has built an entire AICH Hashset, i.e. the file is finished, it starts propagating the Root Hash to other clients.


The first problem it seems to me is that there is no way to publish the entire AICH hashset as part of the ed2k link.

View PostWentloogWhix, on 04 October 2009 - 09:14 PM, said:

Before downloading the file we would have to download a complete hash table.


I can accept that the standard hashset is a good place to start, assuming nothing is corrupted. (First bad assumption - too trusting)
Once a corrupted chunk is detected, and all 53 blocks of 180kb are checked, and found to be corrupt, the wheels seem to fall off.

Let's assume that I am online, even if I am not sharing the file. Am I able to send an entire hashset for a file I no longer share?

Would it not be better to have an option to download the entire AICH hashset either at the start, or when the first corruption is detected?

Do the ED2K servers store the entire AICH hashset? How large would it be for the 600MB file used in the example?

Even if the entire AICH hashset is available, why does eMule continue to trust users that supply it with corrupt data?

Why doesn't eMule check each 180kb segment downloaded, instead of waiting for 9MB ?
So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.
from Vulnerability Assessment Security Maxims

For a Secure VPN option (instead of an insecure proxy), try ItsHidden ($10/mo). And check out PeerBlock for extra (free) protection against the bad guys.

Posted Image

I will donate EUR100 to the first version/mod of eMule that can successfully stop a poisoning attack, and allow me to block/distrust/ignore users from sending me stuff, and allow me to block/prevent them from receiving stuff, and not permit users to take or send partial chunks of data.

Until this happens, or until the corruption handling works correctly, please add the following to your IP Filter (ipfilter.dat):
84.128.0.0      - 84.135.255.255  ,   0 , Poison, Deutsche Telekom AG
85.176.0.0      - 85.182.127.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.228.0.0      - 92.231.255.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.192.0.0      - 92.223.255.255  ,   0 , Poison, QSC AG
78.48.0.0       - 78.50.159.255   ,   0 , Poison, HanseNet Telekommunikation GmbH

With apologies to the legitimate users of these ISPs who are being unfairly tarred with the same brush as the bad guys.
0

#58 User is offline   WentloogWhix 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-October 09

Posted 16 October 2009 - 06:39 PM

View PostWulp, on 15 October 2009 - 03:50 PM, said:

I tried your testfile and it seems that it happens like I supposed, eMule detects corruptions but there is no genuine source so eMule can't retrieve the AICH hashset nor download any non-corrupted data from a good source.

From the Verbose Log: "Unable to request AICH Recoverydata because found no client who supports it and has the same hash as the trusted one"

Would be interesting to see if it works when you as a genuine source were online.
I wouldn't mind to try again as soon as you have some bandwidth available in order to be able to offer the file.


OK, I spent the $12 to buy some more bandwidth. The preferences.ini file looks like this:
[eMule]
Language=1033
MaxUpload=4
AppVersion=0.49c
Nick=Wentloog Whix
IncomingDir=c:\Program Files\eMule\Incoming
TempDir=c:\Temp
TempDirs=
MinUpload=1
MaxDownload=4
MaxConnections=80
MaxHalfConnections=9
ConditionalTCPAccept=0
Port=2303
UDPPort=2303
ServerUDPPort=65535
MaxSourcesPerFile=100
SeeShare=0
ToolTipDelay=1
StatGraphsInterval=3
StatsInterval=5
StatsFillGraphs=0
DownloadCapacity=4
UploadCapacityNew=4
DeadServerRetry=1
ServerKeepAliveTimeout=0
SplitterbarPosition=75
SplitterbarPositionServer=37
SplitterbarPositionStat=30
SplitterbarPositionStat_HL=66
SplitterbarPositionStat_HR=33
SplitterbarPositionFriend=170
SplitterbarPositionIRC=170
SplitterbarPositionShared=179
TransferWnd1=0
TransferWnd2=1
VariousStatisticsMaxValue=100
StatsAverageMinutes=5
MaxConnectionsPerFiveSeconds=20
Check4NewVersionDelay=5
Reconnect=1
Scoresystem=1
Serverlist=1
UpdateNotifyTestClient=1
MinToTray=1
PreventStandby=0
StoreSearches=1
AddServersFromServer=0
AddServersFromClient=0
Splashscreen=1
BringToFront=1
TransferDoubleClick=1
Beeponerror=1
ConfirmExit=1
FilterBadIPs=1
Autoconnect=1
OnlineSignature=0
StartupMinimized=0
AutoStart=0
LastMainWndDlgID=136
LastLogPaneID=2
SafeServerConnect=0
ShowRatesOnTitle=1
IndicateRatings=1
WatchClipboard4ED2kFilelinks=1
SearchMethod=2
CheckDiskspace=0
MinFreeDiskSpace=20971520
SparsePartFiles=0
ResolveSharedShellLinks=0
YourHostname=
CheckFileOpen=1
AutoConnectStaticOnly=0
AutoTakeED2KLinks=1
AddNewFilesPaused=0
3DDepth=5
MiniMule=1
NotifierConfiguration=c:\Program Files\eMule\config\Notifier.ini
NotifyOnDownload=0
NotifyOnNewDownload=0
NotifyOnChat=0
NotifyOnLog=0
NotifyOnImportantError=0
NotifierPopEveryChatMessage=0
NotifierPopNewVersion=0
NotifierUseSound=0
NotifierSoundPath=
TxtEditor=notepad.exe
VideoPlayer=
VideoPlayerArgs=
MessageFilter=fastest download speed|fastest eMule
CommentFilter=http://|https://|ftp://|www.|ftp.
DateTimeFormat=%A, %c
DateTimeFormat4Log=%c
WebTemplateFile=c:\Program Files\eMule\eMule.tmpl
FilenameCleanups=http|www.|.com|.de|.org|.net|shared|powered|sponsored|sharelive|filedonkey|
ExtractMetaData=1
DefaultIRCServerNew=ircchat.emule-project.net
IRCNick=
IRCAddTimestamp=0
IRCFilterName=
IRCFilterUser=0
IRCUseFilter=0
IRCPerformString=
IRCUsePerform=0
IRCListOnConnect=0
IRCAcceptLink=0
IRCAcceptLinkFriends=1
IRCSoundEvents=0
IRCIgnoreMiscMessages=1
IRCIgnoreJoinMessages=1
IRCIgnorePartMessages=1
IRCIgnoreQuitMessages=1
IRCIgnoreEmuleAddFriendMsgs=0
IRCAllowEmuleAddFriend=1
IRCIgnoreEmuleSendLinkMsgs=0
IRCHelpChannel=0
IRCEnableSmileys=1
MessageEnableSmileys=1
SmartIdCheck=1
Verbose=1
DebugSourceExchange=0
LogBannedClients=0
LogRatingDescReceived=1
LogSecureIdent=0
LogFilteredIPs=0
LogFileSaving=1
LogA4AF=0
LogUlDlEvents=1
PreviewPrio=1
UpdateQueueListPref=0
ManualHighPrio=0
FullChunkTransfers=1
ShowOverhead=0
VideoPreviewBackupped=1
StartNextFile=0
FileBufferSize=262144
QueueSize=5000
CommitFiles=1
DAPPref=1
UAPPref=1
FilterServersByIP=1
DisableKnownClientList=0
DisableQueueList=0
UseCreditSystem=1
SaveLogToDisk=1
SaveDebugToDisk=1
EnableScheduler=0
MessagesFromFriendsOnly=1
MessageFromValidSourcesOnly=1
MessageUseCaptchas=1
ShowInfoOnCatTabs=0
DontRecreateStatGraphsonresize=0
AutoFilenameCleanup=1
ShowExtControls=0
UseAutocompletion=1
NetworkKademlia=1
NetworkED2K=1
AutoClearCompleted=0
TransflstRemainOrder=0
UseSimpleTimeRemainingcomputation=0
AllocateFullFile=1
VersionCheckLastAutomatic=1255676445
FilterLevel=127
SecureIdent=1
AdvancedSpamFilter=1
ShowDwlPercentage=1
RemoveFilesToBin=1
AutoArchivePreviewStart=1
ToolbarSetting=0099010203040506070899091011
ToolbarBitmap=
ToolbarBitmapFolder=c:\Program Files\eMule\skins
ToolbarLabels=1
ToolbarIconSize=32
SkinProfile=
SkinProfileDir=c:\Program Files\eMule\skins
HyperTextFont=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
LogTextFont=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
USSEnabled=0
USSUseMillisecondPingTolerance=0
USSPingTolerance=500
USSPingToleranceMilliseconds=200
USSGoingUpDivider=1000
USSGoingDownDivider=1000
USSNumberOfPings=1
A4AFSaveCpu=0
HighresTimer=0
WebMirroralertLevel=0
RunAsUnprivilegedUser=0
OpenPortsonstartUp=0
DebugLogLevel=0
WinXPSP2OrHigher=1
RememberCancelledFiles=1
RememberDownloadedFiles=1
NotifierSendMail=0
NotifierMailSender=
NotifierMailServer=
NotifierMailRecipient=
WinaTransToolbar=1
CryptLayerRequested=1
CryptLayerRequired=1
CryptLayerSupported=1
KadUDPKey=-1575939638
EnableSearchResultSpamFilter=1
SearchResultsFileSizeFormat=0
[Proxy]
ProxyEnablePassword=0
ProxyEnableProxy=0
ProxyName=
ProxyPassword=
ProxyUser=
ProxyPort=1080
ProxyType=0
[Statistics]
statsConnectionsGraphRatio=3
statsExpandedTreeItems=10101100010000011000001000001111000
StatColor0=0x400000
StatColor1=0xffc0c0
StatColor2=0x80ff80
StatColor3=0x00d200
StatColor4=0x008000
StatColor5=0x8080ff
StatColor6=0x0000c8
StatColor7=0x00008c
StatColor8=0xff9696
StatColor9=0xc000c0
StatColor10=0x80ffff
StatColor11=0x000000
StatColor12=0xffffff
StatColor13=0xffffff
StatColor14=0xbebeff
[WebServer]
Password=
PasswordLow=
Port=4711
WebUseUPnP=0
Enabled=0
UseGzip=1
PageRefreshTime=120
UseLowRightsUser=0
AllowAdminHiLevelFunc=0
WebTimeoutMins=5
ShowUploadQueue=0
ShowUploadQueueBanned=0
ShowUploadQueueFriend=0
DownloadSortReverse=1
UploadSortReverse=1
QueueSortReverse=1
ServerSortReverse=1
SharedSortReverse=1
DownloadSort=2
UploadSort=3
QueueSort=3
ServerSort=1
SharedSort=2
[MobileMule]
Password=
Enabled=0
Port=80
[PeerCache]
LastSearch=1255716199
Found=0
EnabledDeprecated=0
PCPort=0
[UPnP]
EnableUPnP=0
SkipWANIPSetup=0
SkipWANPPPSetup=0
CloseUPnPOnExit=1
LastWorkingImplementation=1
[SearchFrmBarState-Summary]
Bars=2
ScreenCX=1024
ScreenCY=768
[ListControlSetup]
SearchListCtrlSortHistory=102,1
SearchListCtrlTableSortItem=1
SearchListCtrlTableSortAscending=0
SearchListCtrlColumnWidths=260,65,60,70,60,220,100,100,100,50,65,50,260,50
SearchListCtrlColumnHidden=0,0,0,0,0,1,0,0,0,0,0,0,1,0
SearchListCtrlColumnOrders=0,1,2,3,4,5,6,7,8,9,10,11,12,13
ServerListCtrlSortHistory=65541,1
ServerListCtrlTableSortItem=4
ServerListCtrlTableSortAscending=0
ServerListCtrlColumnWidths=150,140,150,50,60,60,60,50,50,50,60,60,50,60,50
ServerListCtrlColumnHidden=0,0,0,0,0,0,0,0,0,0,0,1,1,0,0
ServerListCtrlColumnOrders=0,1,2,3,4,5,6,7,8,9,10,11,12,13,14
SharedFilesCtrlSortHistory=1
SharedFilesCtrlTableSortItem=0
SharedFilesCtrlTableSortAscending=1
SharedFilesCtrlColumnWidths=260,65,60,60,220,100,100,120,170,260,60,100,100,100,100,50,65,50
SharedFilesCtrlColumnHidden=0,0,0,0,1,0,1,0,0,1,0,0,1,1,1,1,1,1
SharedFilesCtrlColumnOrders=0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
FriendListCtrlSortHistory=1
FriendListCtrlTableSortItem=0
FriendListCtrlTableSortAscending=1
FriendListCtrlColumnWidths=158
FriendListCtrlColumnHidden=0
FriendListCtrlColumnOrders=0
DownloadListCtrlSortHistory=1
DownloadListCtrlTableSortItem=0
DownloadListCtrlTableSortAscending=1
DownloadListCtrlColumnWidths=260,65,65,65,65,170,60,60,70,110,150,120,100,120
DownloadListCtrlColumnHidden=0,0,1,0,0,0,0,0,0,0,1,1,1,0
DownloadListCtrlColumnOrders=0,1,2,3,4,5,6,7,8,9,10,11,12,13
ClientListCtrlSortHistory=1
ClientListCtrlTableSortItem=0
ClientListCtrlTableSortAscending=1
ClientListCtrlColumnWidths=150,100,65,100,65,100,50,220
ClientListCtrlColumnHidden=0,0,0,0,0,0,0,0
ClientListCtrlColumnOrders=0,1,2,3,4,5,6,7
QueueListCtrlSortHistory=1
QueueListCtrlTableSortItem=0
QueueListCtrlTableSortAscending=1
QueueListCtrlColumnWidths=150,260,60,60,60,60,110,110,60,170
QueueListCtrlColumnHidden=0,0,0,0,0,0,0,0,0,0
QueueListCtrlColumnOrders=0,1,2,3,4,5,6,7,8,9
UploadListCtrlSortHistory=1
UploadListCtrlTableSortItem=0
UploadListCtrlTableSortAscending=1
UploadListCtrlColumnWidths=150,260,65,65,60,80,100,170
UploadListCtrlColumnHidden=0,0,0,0,0,0,0,0
UploadListCtrlColumnOrders=0,1,2,3,4,5,6,7
DownloadClientsCtrlSortHistory=1
DownloadClientsCtrlTableSortItem=0
DownloadClientsCtrlTableSortAscending=1
DownloadClientsCtrlColumnWidths=150,100,260,65,170,65,65,100
DownloadClientsCtrlColumnHidden=0,0,0,0,0,0,0,0
DownloadClientsCtrlColumnOrders=0,1,2,3,4,5,6,7
KadSearchListCtrlSortHistory=1
KadSearchListCtrlTableSortItem=0
KadSearchListCtrlTableSortAscending=1
KadSearchListCtrlColumnWidths=60,220,100,260,100,100,100,100
KadSearchListCtrlColumnHidden=0,0,0,0,0,0,0,0
KadSearchListCtrlColumnOrders=0,1,2,3,4,5,6,7
ONContactListCtrlSortHistory=1
ONContactListCtrlTableSortItem=0
ONContactListCtrlTableSortAscending=1
ONContactListCtrlColumnWidths=236,50,600
ONContactListCtrlColumnHidden=0,0,0
ONContactListCtrlColumnOrders=0,1,2
IrcNickListCtrlSortHistory=1
IrcNickListCtrlTableSortItem=0
IrcNickListCtrlTableSortAscending=1
IrcNickListCtrlColumnWidths=158
IrcNickListCtrlColumnHidden=0
IrcNickListCtrlColumnOrders=0
IrcChannelListCtrlSortHistory=1
IrcChannelListCtrlTableSortItem=0
IrcChannelListCtrlTableSortAscending=1
IrcChannelListCtrlColumnWidths=200,50,350
IrcChannelListCtrlColumnHidden=0,0,0
IrcChannelListCtrlColumnOrders=0,1,2
FileDetailDlgNameSortHistory=1
FileDetailDlgNameTableSortItem=0
FileDetailDlgNameTableSortAscending=1
FileDetailDlgNameColumnWidths=450,60
FileDetailDlgNameColumnHidden=0,0
FileDetailDlgNameColumnOrders=0,1
CommentListCtrlSortHistory=1
CommentListCtrlTableSortItem=0
CommentListCtrlTableSortAscending=1
CommentListCtrlColumnWidths=80,340,260,150,80
CommentListCtrlColumnHidden=0,0,0,0,0
CommentListCtrlColumnOrders=0,1,2,3,4
[Scheduler]
Count=0
[FileDetailDialog]
WindowPlacement=188,96,827,582,1,0
[ArchivePreviewDlg]
ContentList_Name=115
ContentList_Size=65609
ContentList_CRC=131135
ContentList_Attr=196698
ContentList_Time=262259
ContentList_Cmt=327830
ContentList__SortColumn=1163198463
[SearchFrmBarState-Bar0]
BarID=59425
XPos=-2
YPos=-2
Docking=1
MRUDockID=0
MRUDockLeftPos=-2
MRUDockTopPos=-2
MRUDockRightPos=988
MRUDockBottomPos=99
MRUFloatStyle=8196
MRUFloatXPos=-2147483648
MRUFloatYPos=718
[SearchFrmBarState-Bar1]
BarID=59419
Bars=3
Bar#0=0
Bar#1=59425
Bar#2=0


And the verbose log (slightly edited) is:
16/10/2009 06:27:52 PM: Known.met file version is 14 (doesn't support 64bit tags)
16/10/2009 06:27:53 PM: Loaded IP filters from "c:\Program Files\eMule\config\ipfilter.dat"
16/10/2009 06:27:53 PM: Parsed lines/entries:46263  Found IP ranges:46263  Duplicate:0  Merged:0  Time:0 secs
16/10/2009 06:27:54 PM: Using 'H:\Program Files\eMule\config\' as config directory
16/10/2009 06:27:54 PM: AICHSyncThread finished
16/10/2009 06:27:59 PM: Starting Kademlia
16/10/2009 06:27:59 PM: Read 0 source, 0 keyword, and 2 load entries
16/10/2009 06:27:59 PM: Terminating CIndexed::CLoadDataThread - finished loading data
16/10/2009 06:28:00 PM: Received proper magic value after DH-Agreement from Serverconnection IP: 83.140.191.177
16/10/2009 06:28:00 PM: Received proper magic value after DH-Agreement from Serverconnection IP: 194.126.175.202
16/10/2009 06:28:02 PM: Server, Sendlist: Packet size:9859
16/10/2009 06:28:02 PM: My public IP Address is: *****
16/10/2009 06:28:02 PM: Possible IP Change - Checking for expired Server UDP-Keys: 15 UDP Keys total, 0 UDP Keys expired, 0 immediate UDP Pings forced, 0 delayed UDP Pings forced
16/10/2009 06:28:10 PM: Starting NODEFWCHECKUDP Kad Search
16/10/2009 06:28:15 PM: Received possible external Kad Port 16588 from 222.13.148.145
16/10/2009 06:28:23 PM: Incoming unencrypted firewallcheck connection permitted despite RequireEncryption setting  - 80.35.191.173
16/10/2009 06:28:38 PM: Received possible external Kad Port 16588 from 79.89.18.168
16/10/2009 06:28:38 PM: Set external Kad Port to 16588
16/10/2009 06:28:55 PM: Server, Sendlist: Packet size:1285
16/10/2009 06:31:43 PM: Ignored 1 bad contacts in routing answer from 211.157.108.116
16/10/2009 06:32:16 PM: Download session started. User: 85.181.60.240 'Alfreda' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:32:52 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.240 'Alfreda' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 35 secs, Payload: 173.82 KB, Transferred: 173.82 KB, Req blocks not yet completed: 3.
16/10/2009 06:32:53 PM: Download session started. User: 85.181.61.57 'Piano' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:32:53 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:32:57 PM: Download session started. User: 92.230.66.202 'hermione' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:33:01 PM: ALLOC:Start (Testfile.zip) (226.62 MB)
16/10/2009 06:33:06 PM: ALLOC:End (Testfile.zip)
16/10/2009 06:33:48 PM: Obfuscated packet expected but magicvalue mismatch on UDP packet from clientIP: 90.20.154.91, Possible RecvKey: 3593391404
16/10/2009 06:33:48 PM: Client UDP socket: prot=0xf6  opcode=0x8a  sizeaftercrypt=18 realsize=18  Unknown protocol 0xf6: 90.20.154.91:4672
16/10/2009 06:33:48 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 55 secs, Payload: 213.42 KB, Transferred: 213.42 KB, Req blocks not yet completed: 3.
16/10/2009 06:33:56 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 92.230.66.202 'hermione' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 59 secs, Payload: 134.81 KB, Transferred: 134.81 KB, Req blocks not yet completed: 3.
16/10/2009 06:34:00 PM: Download session started. User: 85.181.60.240 'Alfreda' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:34:14 PM: Download session started. User: 84.135.42.243 'alberto_es' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:34:37 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:34:38 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.240 'Alfreda' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 37 secs, Payload: 131.59 KB, Transferred: 131.59 KB, Req blocks not yet completed: 3.
16/10/2009 06:34:56 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.61.57 'Piano' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:03 mins, Payload: 221.04 KB, Transferred: 221.04 KB, Req blocks not yet completed: 3.
16/10/2009 06:34:56 PM: Download session started. User: 92.230.66.202 'hermione' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:35:04 PM: Download session started. User: 84.135.77.187 'Heidie' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:35:13 PM: Download session started. User: 84.135.99.151 'Stubsi' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:35:30 PM: Download session started. User: 84.135.59.204 'ImeldaMarcos' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:35:33 PM: Download session started. User: 85.181.61.57 'Piano' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:35:35 PM: Download session started. User: 85.181.60.240 'Alfreda' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:35:37 PM: Ignored 1 bad contacts in routing answer from 70.245.13.240
16/10/2009 06:35:56 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:18 mins, Payload: 94.85 KB, Transferred: 94.85 KB, Req blocks not yet completed: 3.
16/10/2009 06:36:28 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:37:11 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 85.181.61.57 'Piano' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:38 mins, Payload: 64.23 KB, Transferred: 64.23 KB, Req blocks not yet completed: 3.
16/10/2009 06:37:32 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.77.187 'Heidie' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:27 mins, Payload: 65.00 KB, Transferred: 65.00 KB, Req blocks not yet completed: 3.
16/10/2009 06:37:56 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.42.243 'alberto_es' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:41 mins, Payload: 119.61 KB, Transferred: 119.61 KB, Req blocks not yet completed: 3.
16/10/2009 06:38:14 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.59.204 'ImeldaMarcos' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:44 mins, Payload: 65.25 KB, Transferred: 65.25 KB, Req blocks not yet completed: 3.
16/10/2009 06:38:24 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.99.151 'Stubsi' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:10 mins, Payload: 76.12 KB, Transferred: 76.12 KB, Req blocks not yet completed: 3.
16/10/2009 06:38:41 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Timeout: State:0 (0 = SS_Other, 1 = SS_Half, 2 = SS_Complete User: 92.230.66.202 'hermione' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:44 mins, Payload: 167.44 KB, Transferred: 167.44 KB, Req blocks not yet completed: 3.
16/10/2009 06:38:44 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.240 'Alfreda' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:09 mins, Payload: 158.63 KB, Transferred: 158.63 KB, Req blocks not yet completed: 3.
16/10/2009 06:38:44 PM: Client TCP socket: Error: Wrong header; Client=85.181.60.240 'Alfreda' (eMule v0.49c,OnQueue/None/None)
16/10/2009 06:38:44 PM: Client TCP socket: Error: Wrong header; IP=85.181.60.240
16/10/2009 06:38:53 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:24 mins, Payload: 191.79 KB, Transferred: 191.79 KB, Req blocks not yet completed: 3.
16/10/2009 06:38:53 PM: Saving known files list file "known.met"
16/10/2009 06:38:53 PM: Saving known files list file "cancelled.met"
16/10/2009 06:38:58 PM: Download session started. User: 84.135.42.243 'alberto_es' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:40:02 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.42.243 'alberto_es' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:04 mins, Payload: 205.25 KB, Transferred: 205.25 KB, Req blocks not yet completed: 3.
16/10/2009 06:40:13 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:40:53 PM: Saving clients credit list file "clients.met"
16/10/2009 06:41:00 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 47 secs, Payload: 144.06 KB, Transferred: 144.06 KB, Req blocks not yet completed: 3.
16/10/2009 06:41:15 PM: Cleaned up Kad Incoming Requests Tracklist, entries before: 3, after 0
16/10/2009 06:42:03 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:42:25 PM: Download session started. User: 84.135.42.243 'alberto_es' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:43:11 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:08 mins, Payload: 133.34 KB, Transferred: 133.34 KB, Req blocks not yet completed: 3.
16/10/2009 06:43:26 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.42.243 'alberto_es' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:01 mins, Payload: 166.58 KB, Transferred: 166.58 KB, Req blocks not yet completed: 3.
16/10/2009 06:43:36 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:44:35 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 58 secs, Payload: 186.28 KB, Transferred: 186.28 KB, Req blocks not yet completed: 3.
16/10/2009 06:44:53 PM: Saving servers list file "server.met"
16/10/2009 06:45:31 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:46:14 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 42 secs, Payload: 173.27 KB, Transferred: 173.27 KB, Req blocks not yet completed: 3.
16/10/2009 06:46:16 PM: Download session started. User: 84.135.42.243 'alberto_es' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:46:53 PM: Saving friends list file "emfriends.met"
16/10/2009 06:46:59 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:47:10 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.42.243 'alberto_es' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 53 secs, Payload: 181.46 KB, Transferred: 181.46 KB, Req blocks not yet completed: 3.
16/10/2009 06:47:30 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 31 secs, Payload: 154.83 KB, Transferred: 154.83 KB, Req blocks not yet completed: 3.
16/10/2009 06:48:33 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:49:35 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:01 mins, Payload: 223.90 KB, Transferred: 223.90 KB, Req blocks not yet completed: 3.
16/10/2009 06:49:53 PM: Saving known files list file "known.met"
16/10/2009 06:49:53 PM: Saving known files list file "cancelled.met"
16/10/2009 06:49:56 PM: Download session started. User: 84.135.42.243 'alberto_es' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:50:05 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:51:11 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.42.243 'alberto_es' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:15 mins, Payload: 201.54 KB, Transferred: 201.54 KB, Req blocks not yet completed: 3.
16/10/2009 06:51:21 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:15 mins, Payload: 154.95 KB, Transferred: 154.95 KB, Req blocks not yet completed: 3.
16/10/2009 06:52:15 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:53:11 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 56 secs, Payload: 201.21 KB, Transferred: 201.21 KB, Req blocks not yet completed: 3.
16/10/2009 06:53:25 PM: Download session started. User: 84.135.42.243 'alberto_es' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:53:54 PM: Saving clients credit list file "clients.met"
16/10/2009 06:54:01 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:54:40 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.42.243 'alberto_es' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:15 mins, Payload: 173.22 KB, Transferred: 173.22 KB, Req blocks not yet completed: 3.
16/10/2009 06:54:53 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 52 secs, Payload: 137.99 KB, Transferred: 137.99 KB, Req blocks not yet completed: 3.
16/10/2009 06:55:39 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:56:30 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 51 secs, Payload: 212.88 KB, Transferred: 212.88 KB, Req blocks not yet completed: 3.
16/10/2009 06:57:02 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:57:23 PM: Download session started. User: 84.135.42.243 'alberto_es' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:57:59 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 56 secs, Payload: 162.44 KB, Transferred: 162.44 KB, Req blocks not yet completed: 3.
16/10/2009 06:57:59 PM: Client TCP socket: Error: Wrong header; Client=85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None)
16/10/2009 06:58:20 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.42.243 'alberto_es' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 57 secs, Payload: 149.97 KB, Transferred: 149.97 KB, Req blocks not yet completed: 3.
16/10/2009 06:58:39 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 06:59:30 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 50 secs, Payload: 138.73 KB, Transferred: 138.73 KB, Req blocks not yet completed: 3.
16/10/2009 07:00:12 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:00:43 PM: Client TCP socket (OnConnect): Error 10065: A socket operation was attempted to an unreachable host.; Client=12.150.181.85 '(null)' (,Connecting/None/None)
16/10/2009 07:00:54 PM: Saving known files list file "known.met"
16/10/2009 07:00:54 PM: Saving known files list file "cancelled.met"
16/10/2009 07:01:17 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:05 mins, Payload: 210.73 KB, Transferred: 210.73 KB, Req blocks not yet completed: 3.
16/10/2009 07:01:18 PM: Download session started. User: 84.135.42.243 'alberto_es' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:01:20 PM: Download session started. User: 85.181.60.240 'Alfreda' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:01:26 PM: Download session started. User: 85.181.61.57 'Piano' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:01:40 PM: Download session started. User: 92.230.66.202 'hermione' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:01:54 PM: Saving servers list file "server.met"
16/10/2009 07:02:06 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:02:55 PM: Download session started. User: 84.135.99.151 'Stubsi' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:03:10 PM: Download session started. User: 84.135.59.204 'ImeldaMarcos' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:03:16 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 85.181.60.240 'Alfreda' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:56 mins, Payload: 143.91 KB, Transferred: 143.91 KB, Req blocks not yet completed: 3.
16/10/2009 07:03:24 PM: Download session started. User: 85.181.60.240 'Alfreda' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:03:25 PM: Download session started. User: 84.135.77.187 'Heidie' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:03:31 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.42.243 'alberto_es' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:12 mins, Payload: 56.66 KB, Transferred: 56.66 KB, Req blocks not yet completed: 3.
16/10/2009 07:03:32 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 92.230.66.202 'hermione' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:51 mins, Payload: 53.89 KB, Transferred: 53.89 KB, Req blocks not yet completed: 3.
16/10/2009 07:03:34 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 85.181.61.57 'Piano' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:07 mins, Payload: 68.15 KB, Transferred: 68.15 KB, Req blocks not yet completed: 3.
16/10/2009 07:04:25 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:18 mins, Payload: 133.67 KB, Transferred: 133.67 KB, Req blocks not yet completed: 3.
16/10/2009 07:04:31 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:05:54 PM: Saving friends list file "emfriends.met"
16/10/2009 07:06:11 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.59.204 'ImeldaMarcos' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:01 mins, Payload: 111.84 KB, Transferred: 111.84 KB, Req blocks not yet completed: 3.
16/10/2009 07:06:38 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 85.181.60.240 'Alfreda' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:13 mins, Payload: 149.77 KB, Transferred: 149.77 KB, Req blocks not yet completed: 3.
16/10/2009 07:06:50 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 84.135.77.187 'Heidie' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:25 mins, Payload: 159.55 KB, Transferred: 159.55 KB, Req blocks not yet completed: 3.
16/10/2009 07:06:54 PM: Saving clients credit list file "clients.met"
16/10/2009 07:07:00 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 84.135.99.151 'Stubsi' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 4:04 mins, Payload: 213.02 KB, Transferred: 213.02 KB, Req blocks not yet completed: 3.
16/10/2009 07:07:10 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:38 mins, Payload: 201.46 KB, Transferred: 201.46 KB, Req blocks not yet completed: 3.
16/10/2009 07:07:46 PM: Download session started. User: 85.181.60.147 'DDS' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:07:57 PM: Download session started. User: 84.135.59.204 'ImeldaMarcos' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:08:08 PM: Download session started. User: 84.135.99.151 'Stubsi' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:08:39 PM: Download session started. User: 84.135.77.187 'Heidie' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:09:00 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'DDS' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:14 mins, Payload: 187.23 KB, Transferred: 187.23 KB, Req blocks not yet completed: 3.
16/10/2009 07:09:48 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:10:24 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.77.187 'Heidie' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:45 mins, Payload: 149.77 KB, Transferred: 149.77 KB, Req blocks not yet completed: 3.
16/10/2009 07:10:35 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.59.204 'ImeldaMarcos' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:37 mins, Payload: 168.71 KB, Transferred: 168.71 KB, Req blocks not yet completed: 3.
16/10/2009 07:10:50 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 84.135.99.151 'Stubsi' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:41 mins, Payload: 202.41 KB, Transferred: 202.41 KB, Req blocks not yet completed: 3.
16/10/2009 07:11:02 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:13 mins, Payload: 173.37 KB, Transferred: 173.37 KB, Req blocks not yet completed: 3.
16/10/2009 07:11:52 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:11:54 PM: Saving known files list file "known.met"
16/10/2009 07:11:54 PM: Saving known files list file "cancelled.met"
16/10/2009 07:11:58 PM: Download session started. User: 84.135.59.204 'ImeldaMarcos' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:11:59 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:12:29 PM: Download session started. User: 84.135.99.151 'Marcel' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:12:56 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:04 mins, Payload: 162.13 KB, Transferred: 162.13 KB, Req blocks not yet completed: 3.
16/10/2009 07:12:56 PM: Client TCP socket: Error: Wrong header; Client=85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None)
16/10/2009 07:12:59 PM: Wrote 2 contacts to file.
16/10/2009 07:12:59 PM: Wrote 0 contacts to file.
16/10/2009 07:12:59 PM: Kad merged 1 Zones
16/10/2009 07:13:38 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:14:25 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.59.204 'ImeldaMarcos' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:26 mins, Payload: 132.55 KB, Transferred: 132.55 KB, Req blocks not yet completed: 3.
16/10/2009 07:14:31 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.99.151 'Marcel' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:01 mins, Payload: 148.76 KB, Transferred: 148.76 KB, Req blocks not yet completed: 3.
16/10/2009 07:14:45 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:46 mins, Payload: 211.92 KB, Transferred: 211.92 KB, Req blocks not yet completed: 3.
16/10/2009 07:15:07 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:15:10 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:31 mins, Payload: 217.55 KB, Transferred: 217.55 KB, Req blocks not yet completed: 3.
16/10/2009 07:16:00 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 52 secs, Payload: 210.05 KB, Transferred: 210.05 KB, Req blocks not yet completed: 3.
16/10/2009 07:16:01 PM: Cleaned up Kad Incoming Requests Tracklist, entries before: 4, after 0
16/10/2009 07:16:13 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:16:22 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:16:23 PM: Download session started. User: 84.135.99.151 'Marcel' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:18:07 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:53 mins, Payload: 149.13 KB, Transferred: 149.13 KB, Req blocks not yet completed: 3.
16/10/2009 07:18:07 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:45 mins, Payload: 133.05 KB, Transferred: 133.05 KB, Req blocks not yet completed: 3.
16/10/2009 07:18:14 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.99.151 'Marcel' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:50 mins, Payload: 57.04 KB, Transferred: 57.04 KB, Req blocks not yet completed: 3.
16/10/2009 07:18:14 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:18:17 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:18:54 PM: Saving servers list file "server.met"
16/10/2009 07:19:54 PM: Saving clients credit list file "clients.met"
16/10/2009 07:20:05 PM: Download session started. User: 84.135.99.151 'Marcel' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:20:16 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:20:19 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:04 mins, Payload: 174.30 KB, Transferred: 174.30 KB, Req blocks not yet completed: 3.
16/10/2009 07:20:27 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:09 mins, Payload: 212.95 KB, Transferred: 212.95 KB, Req blocks not yet completed: 3.
16/10/2009 07:20:32 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:21:38 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:05 mins, Payload: 136.76 KB, Transferred: 136.76 KB, Req blocks not yet completed: 3.
16/10/2009 07:21:46 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.99.151 'Marcel' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:41 mins, Payload: 94.81 KB, Transferred: 94.81 KB, Req blocks not yet completed: 3.
16/10/2009 07:22:04 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:47 mins, Payload: 217.84 KB, Transferred: 217.84 KB, Req blocks not yet completed: 3.
16/10/2009 07:22:06 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:22:51 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:22:55 PM: Saving known files list file "known.met"
16/10/2009 07:22:55 PM: Saving known files list file "cancelled.met"
16/10/2009 07:23:11 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:04 mins, Payload: 166.27 KB, Transferred: 166.27 KB, Req blocks not yet completed: 3.
16/10/2009 07:23:38 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 47 secs, Payload: 141.75 KB, Transferred: 141.75 KB, Req blocks not yet completed: 3.
16/10/2009 07:24:06 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:24:37 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 30 secs, Payload: 134.95 KB, Transferred: 134.95 KB, Req blocks not yet completed: 3.
16/10/2009 07:24:54 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:24:54 PM: Saving friends list file "emfriends.met"
16/10/2009 07:25:58 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:04 mins, Payload: 192.98 KB, Transferred: 192.98 KB, Req blocks not yet completed: 3.
16/10/2009 07:26:04 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:26:46 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:26:53 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 49 secs, Payload: 139.13 KB, Transferred: 139.13 KB, Req blocks not yet completed: 3.
16/10/2009 07:27:35 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 49 secs, Payload: 132.43 KB, Transferred: 132.43 KB, Req blocks not yet completed: 3.
16/10/2009 07:27:41 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:27:59 PM: Starting NODEFWCHECKUDP Kad Search
16/10/2009 07:28:18 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:28:21 PM: Kad UDP firewalltest from 84.123.184.195 cancelled
16/10/2009 07:28:25 PM: Cleaned up Kad Incoming Requests Tracklist, entries before: 2, after 0
16/10/2009 07:28:25 PM: Client UDP socket: prot=0xe4  opcode=0x50  sizeaftercrypt=6 realsize=6  ***NOTE: Received wrong size (4) packet in Kademlia::CKademliaUDPListener::Process_KADEMLIA_FIREWALLED_REQ: 212.231.247.175:4672
16/10/2009 07:28:25 PM: Incoming unencrypted firewallcheck connection permitted despite RequireEncryption setting  - 212.231.247.175
16/10/2009 07:28:28 PM: Selected client for UDP Firewallcheck: 84.120.71.66
16/10/2009 07:28:36 PM: Kad UDP firewalltest from 87.11.84.216 cancelled
16/10/2009 07:28:39 PM: Client UDP socket: prot=0xe4  opcode=0x50  sizeaftercrypt=6 realsize=6  ***NOTE: Received wrong size (4) packet in Kademlia::CKademliaUDPListener::Process_KADEMLIA_FIREWALLED_REQ: 85.60.135.1:9872
16/10/2009 07:28:43 PM: Selected client for UDP Firewallcheck: 79.181.42.66
16/10/2009 07:28:47 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:05 mins, Payload: 162.60 KB, Transferred: 162.60 KB, Req blocks not yet completed: 3.
16/10/2009 07:29:30 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:11 mins, Payload: 219.94 KB, Transferred: 219.94 KB, Req blocks not yet completed: 3.
16/10/2009 07:29:40 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:30:22 PM: Download session started. User: 85.181.60.240 'Nadin' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:30:37 PM: Download session started. User: 85.181.61.57 'leFrise' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:30:45 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:05 mins, Payload: 205.19 KB, Transferred: 205.19 KB, Req blocks not yet completed: 3.
16/10/2009 07:30:47 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:30:56 PM: Download session started. User: 92.230.66.202 'transi' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:31:34 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:31:39 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:31:50 PM: Download session started. User: 84.135.99.151 'Marcel' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:32:04 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 85.181.60.240 'Nadin' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:42 mins, Payload: 68.48 KB, Transferred: 68.48 KB, Req blocks not yet completed: 3.
16/10/2009 07:32:13 PM: Download session started. User: 85.181.61.1 'Emeline' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:32:42 PM: Download session started. User: 84.135.42.243 'WalterMelon' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:32:54 PM: Saving clients credit list file "clients.met"
16/10/2009 07:33:07 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 85.181.61.57 'leFrise' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:30 mins, Payload: 62.25 KB, Transferred: 62.25 KB, Req blocks not yet completed: 3.
16/10/2009 07:33:08 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:20 mins, Payload: 182.59 KB, Transferred: 182.59 KB, Req blocks not yet completed: 3.
16/10/2009 07:33:19 PM: Download session started. User: 78.48.74.179 'SilverDollar' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:33:39 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:05 mins, Payload: 49.49 KB, Transferred: 49.49 KB, Req blocks not yet completed: 3.
16/10/2009 07:33:51 PM: Download session started. User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:33:56 PM: Saving known files list file "known.met"
16/10/2009 07:33:56 PM: Saving known files list file "cancelled.met"
16/10/2009 07:34:02 PM: Download session started. User: 78.48.176.126 'donna' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:34:17 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.99.151 'Marcel' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:27 mins, Payload: 61.60 KB, Transferred: 61.60 KB, Req blocks not yet completed: 3.
16/10/2009 07:34:23 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:44 mins, Payload: 142.14 KB, Transferred: 142.14 KB, Req blocks not yet completed: 3.
16/10/2009 07:34:24 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 92.230.66.202 'transi' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:28 mins, Payload: 118.90 KB, Transferred: 118.90 KB, Req blocks not yet completed: 3.
16/10/2009 07:34:41 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:34:45 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 85.181.61.1 'Emeline' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:31 mins, Payload: 109.22 KB, Transferred: 109.22 KB, Req blocks not yet completed: 3.
16/10/2009 07:34:51 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.42.243 'WalterMelon' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:09 mins, Payload: 60.86 KB, Transferred: 60.86 KB, Req blocks not yet completed: 3.
16/10/2009 07:34:53 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:35:39 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 78.48.176.126 'donna' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:36 mins, Payload: 50.79 KB, Transferred: 50.79 KB, Req blocks not yet completed: 3.
16/10/2009 07:35:55 PM: Saving servers list file "server.met"
16/10/2009 07:36:12 PM: Invalid Kad tag; type=0xd2  lenName=37958  name=0x78
16/10/2009 07:36:12 PM: Client UDP socket: prot=0xe4  opcode=0x19  sizeaftercrypt=27 realsize=27  Invalid packet received: 119.164.136.75:11999
16/10/2009 07:36:12 PM: Client UDP socket: prot=0xe4  opcode=0x19  sizeaftercrypt=38 realsize=38  ***NOTE: Received unrequested response packet, size (36) in Kademlia::CKademliaUDPListener::Process_KADEMLIA2_HELLO_RES: 119.164.136.75:11999
16/10/2009 07:36:42 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 78.48.74.179 'SilverDollar' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:23 mins, Payload: 164.65 KB, Transferred: 164.65 KB, Req blocks not yet completed: 3.
16/10/2009 07:37:05 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:13 mins, Payload: 153.33 KB, Transferred: 153.33 KB, Req blocks not yet completed: 3.
16/10/2009 07:37:43 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 3:01 mins, Payload: 210.61 KB, Transferred: 210.61 KB, Req blocks not yet completed: 3.
16/10/2009 07:37:52 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:58 mins, Payload: 206.55 KB, Transferred: 206.55 KB, Req blocks not yet completed: 3.
16/10/2009 07:38:20 PM: Download session started. User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:39:12 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 51 secs, Payload: 186.79 KB, Transferred: 186.79 KB, Req blocks not yet completed: 3.
16/10/2009 07:40:02 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:40:41 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:41:10 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:07 mins, Payload: 177.87 KB, Transferred: 177.87 KB, Req blocks not yet completed: 3.
16/10/2009 07:41:13 PM: Cleaned up Kad Incoming Requests Tracklist, entries before: 4, after 0
16/10/2009 07:41:28 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 46 secs, Payload: 155.26 KB, Transferred: 155.26 KB, Req blocks not yet completed: 3.
16/10/2009 07:41:31 PM: Download session started. User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:42:36 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:04 mins, Payload: 176.50 KB, Transferred: 176.50 KB, Req blocks not yet completed: 3.
16/10/2009 07:43:18 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:43:47 PM: Unable to request AICH Recoverydata because found no client who supports it and has the same hash as the trusted one
16/10/2009 07:43:55 PM: Saving friends list file "emfriends.met"
16/10/2009 07:44:17 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 59 secs, Payload: 155.24 KB, Transferred: 155.24 KB, Req blocks not yet completed: 3.
16/10/2009 07:44:43 PM: Download session started. User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:44:56 PM: Saving known files list file "known.met"
16/10/2009 07:44:56 PM: Saving known files list file "cancelled.met"
16/10/2009 07:45:34 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 51 secs, Payload: 161.66 KB, Transferred: 161.66 KB, Req blocks not yet completed: 3.
16/10/2009 07:45:54 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:45:55 PM: Saving clients credit list file "clients.met"
16/10/2009 07:46:33 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:46:46 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 51 secs, Payload: 183.43 KB, Transferred: 183.43 KB, Req blocks not yet completed: 3.
16/10/2009 07:46:48 PM: Unable to request AICH Recoverydata because found no client who supports it and has the same hash as the trusted one
16/10/2009 07:47:03 PM: Download session started. User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:47:31 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 58 secs, Payload: 217.27 KB, Transferred: 217.27 KB, Req blocks not yet completed: 3.
16/10/2009 07:48:01 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 57 secs, Payload: 170.12 KB, Transferred: 170.12 KB, Req blocks not yet completed: 3.
16/10/2009 07:49:36 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:49:46 PM: Download session started. User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:50:33 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:51:08 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:31 mins, Payload: 210.17 KB, Transferred: 210.17 KB, Req blocks not yet completed: 3.
16/10/2009 07:51:49 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:15 mins, Payload: 158.13 KB, Transferred: 158.13 KB, Req blocks not yet completed: 3.
16/10/2009 07:51:49 PM: Client TCP socket: Error: Wrong header; Client=84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None)
16/10/2009 07:52:02 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:15 mins, Payload: 198.29 KB, Transferred: 198.29 KB, Req blocks not yet completed: 3.
16/10/2009 07:52:55 PM: Saving servers list file "server.met"
16/10/2009 07:53:47 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:53:56 PM: Download session started. User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:54:45 PM: Cleaned up Kad Incoming Requests Tracklist, entries before: 6, after 0
16/10/2009 07:55:08 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:55:37 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:55:57 PM: Saving known files list file "known.met"
16/10/2009 07:55:57 PM: Saving known files list file "cancelled.met"
16/10/2009 07:56:21 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:25 mins, Payload: 201.67 KB, Transferred: 201.67 KB, Req blocks not yet completed: 3.
16/10/2009 07:56:47 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:59 mins, Payload: 173.63 KB, Transferred: 173.63 KB, Req blocks not yet completed: 3.
16/10/2009 07:57:29 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 84.135.77.187 'aphrodite' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:20 mins, Payload: 208.03 KB, Transferred: 208.03 KB, Req blocks not yet completed: 3.
16/10/2009 07:57:30 PM: Download session started. User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:58:13 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:35 mins, Payload: 203.16 KB, Transferred: 203.16 KB, Req blocks not yet completed: 3.
16/10/2009 07:58:35 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:58:41 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:10 mins, Payload: 198.54 KB, Transferred: 198.54 KB, Req blocks not yet completed: 3.
16/10/2009 07:58:55 PM: Saving clients credit list file "clients.met"
16/10/2009 07:59:23 PM: Download session started. User: 85.181.60.240 'Nadin' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:59:26 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 50 secs, Payload: 142.38 KB, Transferred: 142.38 KB, Req blocks not yet completed: 3.
16/10/2009 07:59:46 PM: Download session started. User: 85.181.61.57 'leFrise' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 07:59:58 PM: Download session started. User: 84.135.59.204 'MisterBates' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:00:15 PM: Download session ended: The remote client decided to stop/complete the transfer (got OP_OutOfPartReqs). User: 85.181.60.240 'Nadin' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 51 secs, Payload: 218.89 KB, Transferred: 218.89 KB, Req blocks not yet completed: 3.
16/10/2009 08:00:17 PM: Download session started. User: 92.230.66.202 'transi' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:00:23 PM: Download session started. User: 85.181.60.147 'tigger' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:00:54 PM: Download session started. User: 84.135.77.187 'aphrodite' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:00:58 PM: Download session started. User: 92.230.66.201 'FlinkerAdler' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:01:18 PM: Download session started. User: 85.181.60.240 'Nadin' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:01:19 PM: Download session started. User: 85.181.61.1 'Emeline' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:02:01 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Close User: 92.230.66.202 'transi' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 1:44 mins, Payload: 132.28 KB, Transferred: 132.28 KB, Req blocks not yet completed: 3.
16/10/2009 08:02:16 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 84.135.59.204 'MisterBates' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:17 mins, Payload: 96.39 KB, Transferred: 96.39 KB, Req blocks not yet completed: 3.
16/10/2009 08:02:22 PM: Download session started. User: 84.135.42.243 'WalterMelon' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:02:23 PM: Download session started. User: 84.135.99.151 'Marcel' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:02:32 PM: Download session started. User: 85.181.60.236 'Hannahanna' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:02:45 PM: Download session started. User: 92.230.66.202 'transi' (eMule v0.49c,OnQueue/None/None) in SetDownloadState(). New State: 0
16/10/2009 08:02:55 PM: Saving friends list file "emfriends.met"
16/10/2009 08:03:13 PM: Download session ended: Disconnected: CClientReqSocket::Disconnect(): Error 10053: An established connection was aborted by the software in your host machine. User: 85.181.60.147 'tigger' (eMule v0.49c,Downloading/None/None) in SetDownloadState(). New State: 1, Length: 2:49 mins, Payload: 52.32 KB, Transferred: 52.32 KB, Req blocks not yet completed: 3.
16/10/2009 08:03:19 PM: Deleted public IP
16/10/2009 08:03:19 PM: Stopping Kademlia
16/10/2009 08:03:19 PM: Wrote 108 contacts to file.
16/10/2009 08:03:19 PM: Wrote 0 source, 0 keyword, and 2 load entries
16/10/2009 08:03:19 PM: Saving known files list file "known.met"
16/10/2009 08:03:19 PM: Saving known files list file "cancelled.met"
16/10/2009 08:03:19 PM: Stored 0 open search for restoring on next start
16/10/2009 08:03:19 PM: Aborted any possible UPnP StartDiscoveryThread
16/10/2009 08:03:19 PM: No UPnP Mappings to remove, aborting
16/10/2009 08:03:23 PM: Saving servers list file "server.met"
16/10/2009 08:03:23 PM: Saving clients credit list file "clients.met"
16/10/2009 08:03:23 PM: Saving friends list file "emfriends.met"
16/10/2009 08:03:23 PM: Closed eMule
16/10/2009 08:03:23 PM: CemuleDlg::OnDestroy
16/10/2009 08:03:24 PM: CemuleApp::InitInstance: returning: FALSE
16/10/2009 08:03:24 PM: CemuleApp::ExitInstance


I have eventually found the message
16/10/2009 07:43:47 PM: Unable to request AICH Recoverydata because found no client who supports it and has the same hash as the trusted one

but this message occurs only after the first chunk is reported as corrupted. The download began at 06:31:03 PM and continued until I stopped it at 8pm:
16/10/2009 06:27:52 PM: Starting eMule v0.49c
16/10/2009 06:27:53 PM: Found 0 known shared files
16/10/2009 06:27:53 PM: Credit file loaded, 2 clients are known
16/10/2009 06:27:53 PM: 46263 IP filters loaded
16/10/2009 06:27:59 PM: 27 servers in server.met found
16/10/2009 06:27:59 PM: 0 servers added, 27 not added (already listed/invalid)
16/10/2009 06:27:59 PM: No part files found
16/10/2009 06:27:59 PM: eMule Version 0.49c ready
16/10/2009 06:27:59 PM: Connecting
16/10/2009 06:27:59 PM: Connecting to StormShare 7 (83.140.191.177:4500 - using Protocol Obfuscation) ...
16/10/2009 06:27:59 PM: Read 166 contacts from file.
16/10/2009 06:27:59 PM: Connecting to Sharing Kingdom 5 (194.126.175.202:4500 - using Protocol Obfuscation) ...
16/10/2009 06:27:59 PM: Connected to StormShare 7 (83.140.191.177:4500), sending login request
16/10/2009 06:28:00 PM: Connected to Sharing Kingdom 5 (194.126.175.202:4500), sending login request
16/10/2009 06:28:02 PM: Obfuscated connection established on: Sharing Kingdom 5 (194.126.175.202:4500)
16/10/2009 06:28:02 PM: New client ID is 3049322025
16/10/2009 06:30:13 PM: Found 0 known shared files
16/10/2009 06:31:03 PM: Downloading Testfile.zip
16/10/2009 06:39:51 PM: Found 0 known shared files
16/10/2009 07:43:47 PM: Downloaded part 0 is corrupt :(  (Testfile.zip)
16/10/2009 07:46:48 PM: Downloaded part 24 is corrupt :(  (Testfile.zip)
16/10/2009 08:03:19 PM: Closing eMule


So we are back to square one: the download continues after corruption is detected, and eMule continues to trust all the bogus sources.

Would this behaviour change if the complete AICH Recoverydata was available? My experience with the original files I mentioned is NO. But in the interests of further research, I will make the AICH Recoverydata available, not that I think it will make any difference.
So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.
from Vulnerability Assessment Security Maxims

For a Secure VPN option (instead of an insecure proxy), try ItsHidden ($10/mo). And check out PeerBlock for extra (free) protection against the bad guys.

Posted Image

I will donate EUR100 to the first version/mod of eMule that can successfully stop a poisoning attack, and allow me to block/distrust/ignore users from sending me stuff, and allow me to block/prevent them from receiving stuff, and not permit users to take or send partial chunks of data.

Until this happens, or until the corruption handling works correctly, please add the following to your IP Filter (ipfilter.dat):
84.128.0.0      - 84.135.255.255  ,   0 , Poison, Deutsche Telekom AG
85.176.0.0      - 85.182.127.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.228.0.0      - 92.231.255.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.192.0.0      - 92.223.255.255  ,   0 , Poison, QSC AG
78.48.0.0       - 78.50.159.255   ,   0 , Poison, HanseNet Telekommunikation GmbH

With apologies to the legitimate users of these ISPs who are being unfairly tarred with the same brush as the bad guys.
0

#59 User is offline   Wulp 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1785
  • Joined: 08-July 05

Posted 19 October 2009 - 03:54 PM

View PostWentloogWhix, on 16 October 2009 - 05:19 PM, said:

View PostWentloogWhix, on 04 October 2009 - 09:14 PM, said:

Before downloading the file we would have to download a complete hash table.

I can accept that the standard hashset is a good place to start, assuming nothing is corrupted. (First bad assumption - too trusting)

I don't get this. If you are talking about the standard hashset (NOT the AICH hashset) we don't assume anything. The hashset is either valid or not. Because eMule compares it to the file hash it can be validated immediately. This is 100% proof and has nothing to do with the "trusting the root hash" thing for AICH (which is BTW only needed in case a AICH hash wasn't attached to the ed2k link or you didn't use an ed2k link - both is not the case here). Then, if a downloaded chunk doesn't match its hash from the hashset, it is treated as corrupt and of course nothing is uploaded from your side. I think I've already said this...

Quote

Let's assume that I am online, even if I am not sharing the file. Am I able to send an entire hashset for a file I no longer share?
No, where could a downloader know you from if it doesn't have you as a source.

Quote

Would it not be better to have an option to download the entire AICH hashset either at the start, or when the first corruption is detected?
Normal corruption detection works well but without AICH it only has an accuracy of a full chunk, i.e. ~9,3 MB, also it can't detect the malicious sender.
Of course eMule could reduce the chunk size from 9,3 MB to 180 kB to meet these two problems. But then there would be a huge overhead for every file because there would be a much larger hashset.
AICH is kind of a compromise: It requests this large hashset only in case a corrupted chunk was detected. However for all those approx. 99% of transfers where no corruption occurs, no overhead is wasted unnecessarily by a large AICH-hashset.

Quote

Do the ED2K servers store the entire AICH hashset?
I don't think so.

Quote

How large would it be for the 600MB file used in the example?
That would be around 3400 block hashes. And there are much larger files possible in the network.

Quote

Even if the entire AICH hashset is available, why does eMule continue to trust users that supply it with corrupt data?
Does it? It reads like you haven't tried this out with your testfile yet. Or it is because eMule doesn't ban malicious clients immediately but only after several times (I don't know how many).

Quote

Why doesn't eMule check each 180kb segment downloaded, instead of waiting for 9MB ?
See above (recovery data which includes AICH hashset is only requested after a corruption was detected to save overhead).


Quote

Would this behaviour change if the complete AICH Recoverydata was available?
That's at least what the eMule help or the changelog says...

Quote

I will make the AICH Recoverydata available, not that I think it will make any difference.
You will? So you haven't yet? So you've tested the same thing that I had already tested and explained to you.
Yes you need the recovery data, without it AICH doesn't work. And you obtain it from a valid source (which would be yourself in your case, aka the client that offers the file).
0

#60 User is offline   WentloogWhix 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-October 09

Posted 20 October 2009 - 01:26 PM

View PostWulp, on 19 October 2009 - 04:54 PM, said:

You will? So you haven't yet? So you've tested the same thing that I had already tested and explained to you.
Yes you need the recovery data, without it AICH doesn't work. And you obtain it from a valid source (which would be yourself in your case, aka the client that offers the file).


You misunderstood. Re-read the previous posts in the context of the testing.

1. I reported the problem and everyone said "it's not a problem"
2. I posted the link which was edited out, so no-one could verify whether it was true or not.
3. I undertook not to share the "copyright" material but posted the original hash set so that you could verify that there was poisoning software out there.
4. I tested 3 different versions of eMule and each time someone complained that I was doing something wrong.
5. Finally I was told there was no AICH hashset available. So in spite of a previous undertaking I made the hashset available by making the copyrighted material available.

My point seems to have been lost in all this confusion: at no stage through this entire process did any of the eMule versions that I tested stop downloading the file or block users. I have watched eMule download the same 9.2MB block over and over and over and over, without ever banning any of the users, whether the AICH Hashset was available or not.

As I said at the beinning, eMule trusts everyone and provides me as a user no way of being able to distrust a user or stop downloading from a given user. I'm just forced to accept whatever it downloads without any control, other than modifying the IPfilter. That's a great security model.
So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.
from Vulnerability Assessment Security Maxims

For a Secure VPN option (instead of an insecure proxy), try ItsHidden ($10/mo). And check out PeerBlock for extra (free) protection against the bad guys.

Posted Image

I will donate EUR100 to the first version/mod of eMule that can successfully stop a poisoning attack, and allow me to block/distrust/ignore users from sending me stuff, and allow me to block/prevent them from receiving stuff, and not permit users to take or send partial chunks of data.

Until this happens, or until the corruption handling works correctly, please add the following to your IP Filter (ipfilter.dat):
84.128.0.0      - 84.135.255.255  ,   0 , Poison, Deutsche Telekom AG
85.176.0.0      - 85.182.127.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.228.0.0      - 92.231.255.255  ,   0 , Poison, HanseNet Telekommunikation GmbH
92.192.0.0      - 92.223.255.255  ,   0 , Poison, QSC AG
78.48.0.0       - 78.50.159.255   ,   0 , Poison, HanseNet Telekommunikation GmbH

With apologies to the legitimate users of these ISPs who are being unfairly tarred with the same brush as the bad guys.
1

  • (5 Pages)
  • +
  • 1
  • 2
  • 3
  • 4
  • 5
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users