Re: Does VPN traffic stand out from other traffic to the ISP?

From	Lusotec <nomail@nomail.not>
Newsgroups	comp.os.linux.security
Subject	Re: Does VPN traffic stand out from other traffic to the ISP?
Followup-To	comp.os.linux.security
Date	2014-01-30 12:42 +0000
Organization	A noiseless patient Spider
Message-ID	<lcdhau$32b$1@dont-email.me> (permalink)
References	<lc9ga3$doq$3@news.mixmin.net> <lc9l5p$1j0$1@dont-email.me> <lccqa7$30df$1@adenine.netfront.net>

Followups directed to: comp.os.linux.security

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

ohreally wrote:
> Lusotec wrote:
>> Cordell James wrote:
>>> Does VPN traffic stand out from other traffic?
>> 
>> Yes. It is very easy to spot encrypted traffic among all the traffic
>> and different kinds of encrypted traffic (e.g. https, ssh, vpn,
>> openssl, tor, imaps, pops) have somewhat distinct handshake and early
>> traffic patterns so it is possible to make an educated guess on what
>> kind of encrypted traffic it is.
> 
> That contradicts what other (self-appointed?) experts have told me, that
> is, that vpn traffic over https/p443 is indistinguishable from email or
> other https traffic.

My advice is to do a search for *encrypted traffic analysis* and start 
reading, in particular the many research paper on the subject. I bet you 
will be surprised.

Regards
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iF4EAREIAAYFAlLqSJ0ACgkQGQjO2ccW76pkiQD/bff9FYPRDBkElIRWhHdeMkuU
U5guLLUSOUwy28ddLT8A/1Lb7FW7SWlYNdRBXZ2KkerhLgy82h+4AyPdmD4iddZm
=iAGv
-----END PGP SIGNATURE-----

Back to comp.os.linux.security | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Does VPN traffic stand out from other traffic to the ISP? Cordell James <cordell.james@gmail.com> - 2014-01-29 00:00 +0000
  Re: Does VPN traffic stand out from other traffic to the ISP? Lusotec <nomail@nomail.not> - 2014-01-29 01:23 +0000
    Re: Does VPN traffic stand out from other traffic to the ISP? "ps56k" <pschuman_no5pam_m3@interserv.com> - 2014-01-29 11:19 -0600
    Re: Does VPN traffic stand out from other traffic to the ISP? ohreally <ohreally@maybenot.org> - 2014-01-30 06:09 +0000
      Re: Does VPN traffic stand out from other traffic to the ISP? Lusotec <nomail@nomail.not> - 2014-01-30 12:42 +0000
    Re: Does VPN traffic stand out from other traffic to the ISP? ohyeah <ohyea@idonthingso.com> - 2014-01-31 02:44 +0000
      Re: Does VPN traffic stand out from other traffic to the ISP? Thomas Keusch <fwd+usenet-spam2013q4-1391351858@spam2013q4.bsd-solutions-duesseldorf.de> - 2014-02-02 14:43 +0000
        Re: Does VPN traffic stand out from other traffic to the ISP? Dave <noone$$@llondel.org> - 2014-02-16 21:58 -0800
  Re: Does VPN traffic stand out from other traffic to the ISP? Jared Twyler <admin@intl-alliance.com> - 2014-12-28 13:48 -0800

csiph-web