Detecting bittorrent using Flowmon

Monitoring Peer-2-Peer (especially bittorrent) communication using Flowmon

Product: Flowmon

Version: Any

Platform: Any

Is Flowmon able to detect 'torrent downloads'?

The basic Flowmon monitoring is not very suitable for detecting Peer-2-Peer connections that use "bittorrent" file sharing. This is largely due to the fact that there is not enough information in the flow data to decide whether it is actually a bittorrent traffic.

However, ADS module, which is used for looking for anomalies in the traffic, does detect that and has whole methods dedicated for it:

https://www.flowmon.com/en/products/software-modules/anomaly-detection-system

https://<flowmon-IP>.cz/doc/adsplug/index.html?file=47221019.html

ADS decides on the occurrence of bittorrent communication based on a larger context, looking at the entire batch of flow and tracking some more specific metrics.