Hello!

I think it is pretty volatile I personally have never stayed in touch with one single Ultrapeer for longer then 15 minutes maximum so using the spynode approach to catch individual big sharers will probably take them atleast a couple of weeks to gather enough Query Hit messages like lets say a couple of thousand of them(so they have to spend alot of $$$$).And yes you are correct each servent do have a unique servent ID but I am not exactly sure if that ID is a steady one or if it changes everytime you restart your client using the Microsoft GUID system.Maybe you know better about that?




Yes that is true but I think that the Gnutella developers are working one some kind of thrusted node system that will help alleviate this probably not entirely but atleast make it harder for them to do so.




Yes the QueryHits is probably evidence enough these days since the introduction of the 0.6 Gnutella protocol and its implimentation of the Bearshare extended QueryHit message that also contains a trailer message with amongst other things a flag indicating how many uploads from a servent that has been succesfull.And If I where under investigation I would probably receive a letter from my ISP varning me and actually I would prefer to receive such a letter so that I know what is happening so that I could remove my shares of Gnutella(After all I do not want to loose my Internet connection).Lets just hope that I will be among the lucky ones as most people will be personally I think that the RIAA are a bunch of lazy people and that they will most likely target their efforts against US citizens so I think I am more safe and so are you.




This is irrelevant know since I now know that the QueryHit messages is all the evidence they need.




NO need to use such harch language!And you are correc they do not have to Browse my Shared directory to get evidence but I still think that they are lazy enough to use this method instead of the spy node tactic since that option will cost them much more and give them alot of work.Warner Music used the Browse Host method when performing a Interdiction attack against me which I wrote about in this thread:
http://www.gnutellaforums.com/showth...threadid=13401




You are correct that that Algorithm that I described do not work but the antifreeloader function does work anyway since pong messages with a less value then 20 files in shared directory will be rejected to connect to me over Gnutella so that means that my files will not show up in their search results.But I guess that this function is not bullet proof since I sometimes in my Monitor window see people that will initiate a http connection but the status will then imediatelly be File Not Found but I guess that many freeloaders are lucky enough not to send a pong message to me during a transfer so they will recieve the 200 OK value anyway and complete the download.Well it would be cool if the algorithm I described earlier did work.Maybe some genius could impliment it somehow in a future release of the Gnutella protocoll.

I would like to thank you for spiking me into seek out new knowledge of the Gnutella protocoll.Previously I had an extensive knowledge about the clients and a generall understanding of the Gnutella protocoll but now I know that had some knowledge gaps about some particular parts of the protocoll that I have now filled.

By the way I have looked at some of your posts on the forum and sometimes you are logged in as guest and sometimes as member.It is better if you are always logged in with your member account.

Since the facts in the previous posts are incorrect I am thinking of maybe delete this poll and re-write a new more accurate one.!

__________________
<img src="http://www.jordysworld.de/emoticons/blob16.gif">Sincerely Joakim Agren!