It is no secret that companies like Logistep are monitoring p2p networks to sue file sharers who are offering software from clients like Zuxxez, a German company who recently sued 500 British p2p users claiming that they illegally distributed the game Dream Pinball 3D. The website Torrentfreak got their hands on a copy of one of those letters that have been send out which details the process of how Logistep determines which users are illegally distributing the game.
Logistep uses a software called File Sharing Monitor that targets E-Donkey and Gnutella users. Here is how it works:
- The software connects to a p2p server and requests a filename recording all IP addresses that offer that name
- They request to download the file and if the download is permitted record the following information into a database
- Filename, file size, IP of the distributor, P2P protocol, P2P application, the time and the username
- When this is inserted the application does a automatic whois and is able to send an infringement letter to the ISP
I think it is interesting to note that this is almost an automatic process which leads to some questions. How do they know which archive has the correct size and is actually their product and not a broken archive ? Is not it only possible to know the exact file size if they downloaded it at least once to verify that is is indeed their product ?
Let us assume that they are not stupid and that they filter out every file below a certain size to prevent that users who do share mods or patches get sued. Let us further assume that a file that is labeled a certain way (with group tags) and shared among many users is the right program. Does this mean that the user that they are suing is responsible ? They will always sue the account holder which could or could not be the person who shared the files.
What possible solutions can I think of that make the Logistep file monitor useless ? Please note that this is hypothetic, I’m not advising anyone to actually use the methods listed below.
- don’t share files
- share only files with no plausible filename (3dpd)
- use encryption to share the files
- use vpns like Relakks
to share them
- switch to Usenet
- buy the game ;)
Can you think of anything else left to say ?
Related posts:
Private Encrypted File SharingFile and Directory Monitoring
File Dropper Simple File Hosting
Windows File Server
Share Files with HTTP File Server
Batch File Rename
Monitor Folders For File Changes And Additions
Windows Batch File Creation
6 Responses to “How Logistep catches file sharers”
Trackbacks/Pingbacks
-
[...] Logistep catches peer to peer software thievesby pretending to be a peer. It then has all the IP addresses of users computers that automatically offered a game. Using whois they know how to prosecute. And this is what they are doing with many hundreds of prosecutions. Unfortunately Swiss law is behind the technology which is causing a few problems. But these are bound to be solved and yet more game stealing criminals will feel the long arm of the law. [...]
-
[...] le préposé à la protection des données, qui avait exigé l’an dernier que la société Logistep cesse de traquer les adresses IP des internautes mettant à disposition des fichiers via les [...]
-
[...] uses a software called File Sharing Monitor that targets E-Donkey and Gnutella users. Here is how it [...]


Cox sent a letter regarding use of a torrent downloading/sharing a file to someone I know. This possibily what was used to track him.
Just ENABLE and FORCE protocoll obfuscation in the eMule security options (.47c).
Since Logistep uses a Shareaza derivate, you will avoid ANY communication with those clients !!!!
The same goes for utorrent and Azureus.
Force the protocoll obfuscation.