<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: DPI: simplified and demystified</title>
	<atom:link href="http://www.p2pnet.net/story/21205/feed" rel="self" type="application/rss+xml" />
	<link>http://www.p2pnet.net/story/21205</link>
	<description>p2pnet.net - reader powered</description>
	<lastBuildDate>Wed, 01 Feb 2012 15:11:09 -0300</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Brett Glass</title>
		<link>http://www.p2pnet.net/story/21205/comment-page-1#comment-973400</link>
		<dc:creator>Brett Glass</dc:creator>
		<pubDate>Tue, 05 May 2009 15:28:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/?p=21205#comment-973400</guid>
		<description>This article ignores a key point: many network abusers violate IETF protocols so as to hide their abuse (e.g. by using TCP Port 80, which is reserved for the Web, for other purposes). Careful monitoring of the traffic is simply necessary to combat this abuse. It isn&#039;t &quot;inspection;&quot; no human being is &quot;inspecting&quot; the packet. But it&#039;s necessary to prevent abusers from running roughshod over our networks.</description>
		<content:encoded><![CDATA[<p>This article ignores a key point: many network abusers violate IETF protocols so as to hide their abuse (e.g. by using TCP Port 80, which is reserved for the Web, for other purposes). Careful monitoring of the traffic is simply necessary to combat this abuse. It isn&#8217;t &#8220;inspection;&#8221; no human being is &#8220;inspecting&#8221; the packet. But it&#8217;s necessary to prevent abusers from running roughshod over our networks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Henry Emrich</title>
		<link>http://www.p2pnet.net/story/21205/comment-page-1#comment-973396</link>
		<dc:creator>Henry Emrich</dc:creator>
		<pubDate>Tue, 05 May 2009 15:10:51 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/?p=21205#comment-973396</guid>
		<description>Jon:
   &quot;That comment wasn&#039;t made by me&quot;.

   Actually, I kinda figured that, because you&#039;re actually one of the mellowest folks here.

@Leon:
  &quot;When will people learn that there is a difference between the application of technology and the technology itself.
âDeep Packet inspectionâ has existed for as long as packets have. Sniffers have been used to debug, watch for, and understand network communications forâ¦ well ever.&quot;
   
   Some of us know that.  (Of course,  some of us also know that the CIA armed and trained a great many of the people we&#039;re now supposed to call &quot;the Iraqi Insurgency&quot; -- not to mention Bin Laden himself.

   The ironic thing is, in the Net Neutrality/DPI squabble, BOTH of the main &quot;sides&quot; have good points:
   It IS problematic for providers to engage in censorship, or block apps entirely, or suchlike.
   (Ignoring, of course, that there&#039;s a big difference between &quot;they blocked bit-torrent!  I can&#039;t use it!&quot; and &quot;They prioritize bit-torrent traffic lower during peak usage hours.&quot;  That&#039;s really all &quot;throttling&quot; amounts too: If you&#039;ve ever used Utorrent, you have the capacity to impose &quot;bandwidth-caps&quot; on other users just as much as the ISP does on YOU, but most people don&#039;t bother to think about that.  We all love a nice, juicy doomsday-scenario, complete with an obvious &quot;devil&quot;.

   I&#039;ll admit that I&#039;m not immune to this -- else I wouldn&#039;t have gotten so damnably intense about it.
   I take stuff just as seriously as everybody else here -- sometimes, too seriously.</description>
		<content:encoded><![CDATA[<p>Jon:<br />
   &#8220;That comment wasn&#8217;t made by me&#8221;.</p>
<p>   Actually, I kinda figured that, because you&#8217;re actually one of the mellowest folks here.</p>
<p>@Leon:<br />
  &#8220;When will people learn that there is a difference between the application of technology and the technology itself.<br />
âDeep Packet inspectionâ has existed for as long as packets have. Sniffers have been used to debug, watch for, and understand network communications forâ¦ well ever.&#8221;</p>
<p>   Some of us know that.  (Of course,  some of us also know that the CIA armed and trained a great many of the people we&#8217;re now supposed to call &#8220;the Iraqi Insurgency&#8221; &#8212; not to mention Bin Laden himself.</p>
<p>   The ironic thing is, in the Net Neutrality/DPI squabble, BOTH of the main &#8220;sides&#8221; have good points:<br />
   It IS problematic for providers to engage in censorship, or block apps entirely, or suchlike.<br />
   (Ignoring, of course, that there&#8217;s a big difference between &#8220;they blocked bit-torrent!  I can&#8217;t use it!&#8221; and &#8220;They prioritize bit-torrent traffic lower during peak usage hours.&#8221;  That&#8217;s really all &#8220;throttling&#8221; amounts too: If you&#8217;ve ever used Utorrent, you have the capacity to impose &#8220;bandwidth-caps&#8221; on other users just as much as the ISP does on YOU, but most people don&#8217;t bother to think about that.  We all love a nice, juicy doomsday-scenario, complete with an obvious &#8220;devil&#8221;.</p>
<p>   I&#8217;ll admit that I&#8217;m not immune to this &#8212; else I wouldn&#8217;t have gotten so damnably intense about it.<br />
   I take stuff just as seriously as everybody else here &#8212; sometimes, too seriously.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jon</title>
		<link>http://www.p2pnet.net/story/21205/comment-page-1#comment-973388</link>
		<dc:creator>Jon</dc:creator>
		<pubDate>Tue, 05 May 2009 11:01:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/?p=21205#comment-973388</guid>
		<description>Henry - That comment wasn&#039;t made by me. It was a troll siging in as &#039;Jon&#039;.

Cheers!</description>
		<content:encoded><![CDATA[<p>Henry &#8211; That comment wasn&#8217;t made by me. It was a troll siging in as &#8216;Jon&#8217;.</p>
<p>Cheers!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Leon Ward</title>
		<link>http://www.p2pnet.net/story/21205/comment-page-1#comment-973385</link>
		<dc:creator>Leon Ward</dc:creator>
		<pubDate>Tue, 05 May 2009 08:21:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/?p=21205#comment-973385</guid>
		<description>When will people learn that there is a difference between the application of technology and the technology itself.
&quot;Deep Packet inspection&quot; has existed for as long as packets have. Sniffers have been used to debug, watch for, and understand network communications for... well ever.

Remember all the bad press against debuggers as tools to violate DRM &amp; IP? Lets not link another *vital* internet technology to another political fight, regardless of it&#039;s intentions.</description>
		<content:encoded><![CDATA[<p>When will people learn that there is a difference between the application of technology and the technology itself.<br />
&#8220;Deep Packet inspection&#8221; has existed for as long as packets have. Sniffers have been used to debug, watch for, and understand network communications for&#8230; well ever.</p>
<p>Remember all the bad press against debuggers as tools to violate DRM &amp; IP? Lets not link another *vital* internet technology to another political fight, regardless of it&#8217;s intentions.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Henry Emrich</title>
		<link>http://www.p2pnet.net/story/21205/comment-page-1#comment-973372</link>
		<dc:creator>Henry Emrich</dc:creator>
		<pubDate>Tue, 05 May 2009 03:37:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/?p=21205#comment-973372</guid>
		<description>Jon: &quot;Yaawn&quot;

   Hmm....I &quot;brought&quot; that new guy by referencing his blog-post.
   (And I DId prompt a rather more substantive explanation of what DPI is.)
   But hey, cool. :) 

&lt;i&gt;That wasn&#039;t me, Henry: It was a troll signing itself in as &#039;Jon&#039;.&lt;/i&gt;</description>
		<content:encoded><![CDATA[<p>Jon: &#8220;Yaawn&#8221;</p>
<p>   Hmm&#8230;.I &#8220;brought&#8221; that new guy by referencing his blog-post.<br />
   (And I DId prompt a rather more substantive explanation of what DPI is.)<br />
   But hey, cool. <img src='http://www.p2pnet.net/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  </p>
<p><i>That wasn&#8217;t me, Henry: It was a troll signing itself in as &#8216;Jon&#8217;.</i></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jon (Newton)</title>
		<link>http://www.p2pnet.net/story/21205/comment-page-1#comment-973370</link>
		<dc:creator>Jon (Newton)</dc:creator>
		<pubDate>Tue, 05 May 2009 02:45:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/?p=21205#comment-973370</guid>
		<description>&quot;I just noticed that Christopher has some articles on the privacy gov site found here:
http://dpi.priv.gc.ca/index.php/essays/

&lt;i&gt;This was posted by a troll signing itself &#039;Jon&#039; and has been edited: I left the link (to the Privacy Commissioner&#039;s anti-DPI page and already cited in several p2pnet posts) in - Jon&lt;/i&gt;

Cheers!</description>
		<content:encoded><![CDATA[<p>&#8220;I just noticed that Christopher has some articles on the privacy gov site found here:<br />
<a href="http://dpi.priv.gc.ca/index.php/essays/" rel="nofollow">http://dpi.priv.gc.ca/index.php/essays/</a></p>
<p><i>This was posted by a troll signing itself &#8216;Jon&#8217; and has been edited: I left the link (to the Privacy Commissioner&#8217;s anti-DPI page and already cited in several p2pnet posts) in &#8211; Jon</i></p>
<p>Cheers!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan Foster</title>
		<link>http://www.p2pnet.net/story/21205/comment-page-1#comment-973366</link>
		<dc:creator>Dan Foster</dc:creator>
		<pubDate>Tue, 05 May 2009 01:51:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/?p=21205#comment-973366</guid>
		<description>:?</description>
		<content:encoded><![CDATA[<p> <img src='http://www.p2pnet.net/wp-includes/images/smilies/icon_confused.gif' alt=':?' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Henry Emrich</title>
		<link>http://www.p2pnet.net/story/21205/comment-page-1#comment-973359</link>
		<dc:creator>Henry Emrich</dc:creator>
		<pubDate>Mon, 04 May 2009 23:36:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.p2pnet.net/?p=21205#comment-973359</guid>
		<description>1. I love this article, primarily because it&#039;s actually thorough and informative (and not more scare-mongering).

   My only major quibble is with this:

  &quot;In attending to surveillance at a broad level of social analysis, David Lyon notes that surveillance is âthe focused, systematic and routine attention to personal details for purposes of influence, management, protection or detectionâ that it is âdeliberate and depends on certain protocols and techniquesâ (Lyon 2007: 14). Lyonâs definition corresponds with potential uses of DPI technologies to influence action though the alteration of data packets, and management of action by potentially limiting websites that can be visited and online actions that can be performed.&quot;

    Oooh, that sounds uber-scary! &quot;They&quot; might &quot;potentially&quot; limit -- or merely &quot;influence&quot; -- your online activities.
   Except, Y&#039;know what?  DPI is merely a fine-grained version of what&#039;s already happening.
   Shallow packet-inspection (like what your firewall is probably already doing) can prevent connectivity entirely.  Any technology using it &quot;knows&quot; where you&#039;re connecting to, as far as IP address and suchlike.  (So I gotta ask: is that &quot;your private data&quot;?  If so, firewalls should be banned.)   Not sarcasm -- just real skepticism in regard to how government wonks do stuff.

   As for MPI, it&#039;s even more super-evil than SPI, because: 
  &quot;When a packet enters the proxy, it is analyzed against a parse-list that systems administrators can easily update. A parse-list is somewhat more subtle than a blacklist. Whereas the latter establishes that something is either permissible or impermissible, a parse-list allows specific packet-types to be allowed or disallowed based on their data format types and associated location on the Internet, rather than on their IP address alone. Using MPI devices, administrators could prevent client computers from receiving flash files from YouTube, or image files from social networking sites.&quot;

   I can hear it now -- &quot;Ooh!  The big evil providers could block Youtube and force me to use MSN video instead!&quot;
   (Oh but wait, they could do that really simply on their side NOW, simply by changing their local DNS so that &quot;www.youtube.com&quot; forcibly resolves to the destination they *want* it to.  Hell, they don&#039;t even need to do anything on *their* side -- before I was running the firewall I have now, I had to reinstall Xp three times simply because I kept getting infested with a forced-redirect thing where the only thing my web-browser was capable of displaying was a freaky gay-sex porn site. (Look it up -- it&#039;s very real.)

  &quot;It is important to distinguish between surveillance, which is evidenced when ISPs use DPI devices to inspect each packet that passes along their network,and search, which entails looking for a particular element of network traffic. Surveillance extends beyond search because â[r]ather than targeting specific information, surveillance can ensnare a significant amount of data beyond any originally soughtâ (Solove 2008: 109). In making this distinction, Solove is calling attention to potential breadth of digital surveillance, while also implicitly identifying that there is a qualitative difference between broad-based social surveillance, and individual surveillance or particular searches for information.

While broad surveillance may accidentally capture information beyond that sought, âsearchâ surveillance â the specific targeting of an information-type â may provide the surveying party with a deep field of data that is relatively limited in its scope. Whereas broad surveillance may identify how popular VoIP applications are on an ISPâs network, a targeted search of a customerâs Internet habits may reveal precisely how much that individual uses such applications. The distinction between broad and narrow surveillance processes raises questions of the felt and realized impacts of surveillance, and whether multifaceted responses to different calibers of surveillance are needed when addressing ISP uses of DPI equipment. In both broad and narrow surveillance procedures, questions of who is, or may be, discriminated against must also be raised, as must the possibilities of âsocial sortingâ that may arise following the deployment of DPI technologies.&quot;

   All I&#039;m going to say about the above is: if it&#039;s &quot;It is important to distinguish between surveillance, which is evidenced when ISPs use DPI devices to inspect each packet that passes along their network,and search, which entails looking for a particular element of network traffic&quot;, then why does he fail to do so later in the article?  Or are you classifying things into &quot;surveillance&quot;, and broad vs. narrow search?

   More importantly, just what exactly is it that DPI opponents want to have the government ban?
   Is it the ability to potentially *block* packets from reaching their destination?  Goodbye to even the simplest and most basic firewalls.
   Or maybe it&#039;s the ability to slow down traffic (derisively -- and innacurately -- described as &quot;throttling&quot;).  So much for time-sensitive applications.  So much for all that Buck Rogers bullshit about how doctors will be able to do surgery remotely.  After all, we wouldn&#039;t want somebody&#039;s WoW gaming-session to suffer from extra lag :)  (Strawman?  I don&#039;t think so.)

   Or maybe what DPI opponents are against is the forensic analysis aspect (they can&#039;t &quot;hear&quot; what you say on Skype, but they can merely tell that you&#039;re using it.)  How this is a violation, I have no idea.  So they know I&#039;m using Skype?

   Hint: SO CAN THE GOVERNMENT -- ESPECIALLY after you empower them to enforce something like Net-Neutrality.  I mean, we *know* that the NSA likes to have the backdoor to things.  We already *know* their extreme ambivalence toward end-user encryption.

   So just what exactly is it that is so uniquely evil about DPI, that isn&#039;t already equally &quot;threatening&quot; in other forms?
   And more importantly (which brings me back to my original point, which everybody just dismissed as me being too intense) -- how do you possibly draft legislation which prevents the &quot;bad&quot; uses, without essentially destroying the Internet in the process.

   Personally, I think collusion between governments and businessfolk (much less, legislation FORCED by corporate lobbyists under cover of &quot;protecting consumers&quot;.  

   Thus, I&#039;m pretty sure BOTH sides of this &quot;debate&quot; are bullshit:
   But, glad to see the clarification here.  It was informative in the extreme :)</description>
		<content:encoded><![CDATA[<p>1. I love this article, primarily because it&#8217;s actually thorough and informative (and not more scare-mongering).</p>
<p>   My only major quibble is with this:</p>
<p>  &#8220;In attending to surveillance at a broad level of social analysis, David Lyon notes that surveillance is âthe focused, systematic and routine attention to personal details for purposes of influence, management, protection or detectionâ that it is âdeliberate and depends on certain protocols and techniquesâ (Lyon 2007: 14). Lyonâs definition corresponds with potential uses of DPI technologies to influence action though the alteration of data packets, and management of action by potentially limiting websites that can be visited and online actions that can be performed.&#8221;</p>
<p>    Oooh, that sounds uber-scary! &#8220;They&#8221; might &#8220;potentially&#8221; limit &#8212; or merely &#8220;influence&#8221; &#8212; your online activities.<br />
   Except, Y&#8217;know what?  DPI is merely a fine-grained version of what&#8217;s already happening.<br />
   Shallow packet-inspection (like what your firewall is probably already doing) can prevent connectivity entirely.  Any technology using it &#8220;knows&#8221; where you&#8217;re connecting to, as far as IP address and suchlike.  (So I gotta ask: is that &#8220;your private data&#8221;?  If so, firewalls should be banned.)   Not sarcasm &#8212; just real skepticism in regard to how government wonks do stuff.</p>
<p>   As for MPI, it&#8217;s even more super-evil than SPI, because:<br />
  &#8220;When a packet enters the proxy, it is analyzed against a parse-list that systems administrators can easily update. A parse-list is somewhat more subtle than a blacklist. Whereas the latter establishes that something is either permissible or impermissible, a parse-list allows specific packet-types to be allowed or disallowed based on their data format types and associated location on the Internet, rather than on their IP address alone. Using MPI devices, administrators could prevent client computers from receiving flash files from YouTube, or image files from social networking sites.&#8221;</p>
<p>   I can hear it now &#8212; &#8220;Ooh!  The big evil providers could block Youtube and force me to use MSN video instead!&#8221;<br />
   (Oh but wait, they could do that really simply on their side NOW, simply by changing their local DNS so that &#8220;www.youtube.com&#8221; forcibly resolves to the destination they *want* it to.  Hell, they don&#8217;t even need to do anything on *their* side &#8212; before I was running the firewall I have now, I had to reinstall Xp three times simply because I kept getting infested with a forced-redirect thing where the only thing my web-browser was capable of displaying was a freaky gay-sex porn site. (Look it up &#8212; it&#8217;s very real.)</p>
<p>  &#8220;It is important to distinguish between surveillance, which is evidenced when ISPs use DPI devices to inspect each packet that passes along their network,and search, which entails looking for a particular element of network traffic. Surveillance extends beyond search because â[r]ather than targeting specific information, surveillance can ensnare a significant amount of data beyond any originally soughtâ (Solove 2008: 109). In making this distinction, Solove is calling attention to potential breadth of digital surveillance, while also implicitly identifying that there is a qualitative difference between broad-based social surveillance, and individual surveillance or particular searches for information.</p>
<p>While broad surveillance may accidentally capture information beyond that sought, âsearchâ surveillance â the specific targeting of an information-type â may provide the surveying party with a deep field of data that is relatively limited in its scope. Whereas broad surveillance may identify how popular VoIP applications are on an ISPâs network, a targeted search of a customerâs Internet habits may reveal precisely how much that individual uses such applications. The distinction between broad and narrow surveillance processes raises questions of the felt and realized impacts of surveillance, and whether multifaceted responses to different calibers of surveillance are needed when addressing ISP uses of DPI equipment. In both broad and narrow surveillance procedures, questions of who is, or may be, discriminated against must also be raised, as must the possibilities of âsocial sortingâ that may arise following the deployment of DPI technologies.&#8221;</p>
<p>   All I&#8217;m going to say about the above is: if it&#8217;s &#8220;It is important to distinguish between surveillance, which is evidenced when ISPs use DPI devices to inspect each packet that passes along their network,and search, which entails looking for a particular element of network traffic&#8221;, then why does he fail to do so later in the article?  Or are you classifying things into &#8220;surveillance&#8221;, and broad vs. narrow search?</p>
<p>   More importantly, just what exactly is it that DPI opponents want to have the government ban?<br />
   Is it the ability to potentially *block* packets from reaching their destination?  Goodbye to even the simplest and most basic firewalls.<br />
   Or maybe it&#8217;s the ability to slow down traffic (derisively &#8212; and innacurately &#8212; described as &#8220;throttling&#8221;).  So much for time-sensitive applications.  So much for all that Buck Rogers bullshit about how doctors will be able to do surgery remotely.  After all, we wouldn&#8217;t want somebody&#8217;s WoW gaming-session to suffer from extra lag <img src='http://www.p2pnet.net/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />   (Strawman?  I don&#8217;t think so.)</p>
<p>   Or maybe what DPI opponents are against is the forensic analysis aspect (they can&#8217;t &#8220;hear&#8221; what you say on Skype, but they can merely tell that you&#8217;re using it.)  How this is a violation, I have no idea.  So they know I&#8217;m using Skype?</p>
<p>   Hint: SO CAN THE GOVERNMENT &#8212; ESPECIALLY after you empower them to enforce something like Net-Neutrality.  I mean, we *know* that the NSA likes to have the backdoor to things.  We already *know* their extreme ambivalence toward end-user encryption.</p>
<p>   So just what exactly is it that is so uniquely evil about DPI, that isn&#8217;t already equally &#8220;threatening&#8221; in other forms?<br />
   And more importantly (which brings me back to my original point, which everybody just dismissed as me being too intense) &#8212; how do you possibly draft legislation which prevents the &#8220;bad&#8221; uses, without essentially destroying the Internet in the process.</p>
<p>   Personally, I think collusion between governments and businessfolk (much less, legislation FORCED by corporate lobbyists under cover of &#8220;protecting consumers&#8221;.  </p>
<p>   Thus, I&#8217;m pretty sure BOTH sides of this &#8220;debate&#8221; are bullshit:<br />
   But, glad to see the clarification here.  It was informative in the extreme <img src='http://www.p2pnet.net/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
</channel>
</rss>


