+ Post New Thread
Results 1 to 8 of 8
Internet Related/Filtering/Firewall Thread, Tracking Skype usage in Websense in Technical; Hi there We have recently allowed Skype on our curric network, and will be using Websense to track and report ...
  1. #1

    Join Date
    Feb 2011
    Location
    Warwickshire
    Posts
    5
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Tracking Skype usage in Websense

    Hi there

    We have recently allowed Skype on our curric network, and will be using Websense to track and report usage. Does anyone know the URL that Skype uses for the actual comms side of things, rather than just messaging or adverts? I think it might be ui.skype.com?

    Thanks
    SteveH

  2. #2
    CensorNet's Avatar
    Join Date
    Aug 2007
    Location
    Bristol, UK
    Posts
    11
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    14
    Skype usage is really hard to track. As it is a peer to peer application it uses many different IP's over SSL tunnels to connect to other Skype users and lots of random port numbers. If Websense can do L7 filtering you can probably manage it but I don't think you could rely on a particular domain name to identify Skype.

    This is a detailed explanation of Skype protocol (not for the faint hearted!)

    http://www.blackhat.com/presentation...-biondi-up.pdf

  3. Thanks to CensorNet from:

    tom_newton (26th April 2011)

  4. #3


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,448
    Thank Post
    865
    Thanked 839 Times in 662 Posts
    Rep Power
    194
    Our anonymous pal from censornet has got it fairly spot on there. We're working on ways to track skype, but you can't do it by URL, and even when you can its "is using skype/is not using skype" kind of granularity

  5. #4
    CensorNet's Avatar
    Join Date
    Aug 2007
    Location
    Bristol, UK
    Posts
    11
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    14
    Sorry, didn't mean to be anonymous It's Tim here - MD of CensorNet.

    I'll try and set a sig in the settings

  6. #5

    Join Date
    Feb 2011
    Location
    Warwickshire
    Posts
    5
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks for the very useful info on Skype - I am hoping that we can do something similar to our tracking of Conficker with Websense. You can't actually see the activity par say, but you can see a signature pattern that is detectable. I will let you know how I get on !

    SteveH

  7. #6


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,125
    Thank Post
    203
    Thanked 2,390 Times in 1,770 Posts
    Rep Power
    704
    The IT Administrators Guide for Skype has some details on how it works along with settings which can be used to force it through a HTTPS or SOCKS5 proxy.

    http://download.skype.com/share/busi...tors-guide.pdf

  8. #7

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,200
    Thank Post
    936
    Thanked 315 Times in 184 Posts
    Blog Entries
    11
    Rep Power
    163
    Quote Originally Posted by CensorNet View Post
    Sorry, didn't mean to be anonymous It's Tim here - MD of CensorNet.

    I'll try and set a sig in the settings
    Hi Tim,

    Welcome to the party.

    Gareth

  9. #8

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,200
    Thank Post
    936
    Thanked 315 Times in 184 Posts
    Blog Entries
    11
    Rep Power
    163
    Our LEA refuse the use of Skype for the exact reasons - you cannot track it due to it using higher end ports above 1024, The LEA doesn't allow these ports - not even for staff.

    It was brought up today in a meeting at Swansea LEA.

    It also opens up the issue of child protection (which is outside this topic).

    Gareth

SHARE:
+ Post New Thread

Similar Threads

  1. Websense on 2008
    By timbo343 in forum Internet Related/Filtering/Firewall
    Replies: 6
    Last Post: 23rd April 2010, 10:33 AM
  2. Websense Cost ?
    By karldenton in forum Windows
    Replies: 11
    Last Post: 14th July 2008, 12:13 PM
  3. Tracking abusive usage?
    By contink in forum How do you do....it?
    Replies: 20
    Last Post: 19th July 2007, 08:55 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •