Who is flooding the Gnutella Network???

B

BeiibeeGiirl

New member
Just try the following:
First, search for 'a beautiful mind divx'
then search for 'a beautiful divx' and tell me if you are seeing the same weird behaviour I did.

"a beautiful mind divx" sends me about 600 results, "a beautiful divx" just 30. Of those 600 hosts some don't even seem to be running gnutella clients (although many do).

I guess it's some MPAA trick. What I would like is find out the IPs of those clients spreading those messages, to be able to block them...
 
Hi,
most Gnutella clients do search ORed, not ANDed as most of us expect (search engine behaviour). So searching for 'beautiful divx' will list all files containing beautiful in the filename + all files containing DivX in the filename. A lot of files. :-) Together with 'mind' you will find even more, e.g also songs from 'Simple Minds'. Conspiracy theory end, closing this G-file. *g*

Hope it helps, Moak
 
I might not know much about Gnutella, but you seem to have even less knowledge on that subject than me.

Nearly all of the gnutella clients search with 'AND', - but most of them also have an algorithm to find files with similar but not exactly the same filenames.

All of the 600 files I found contain "a beautiful mind divx", but strangely files containing "a beautiful divx" seem to be quite rare. And even weirder I found it, that I received one file 117 times from 117 different hosts but none of those files could be downloaded.
 
Oops, guest is right about ANDed search, my fault!

Perhaps someone explains client busy states and NAT/firewall problematics... and why it's not a MPAA/RIAA conspiracy, when you can't download files. No need to block someone. I need a nap. :-)

Have a nice day, sorry for telling stupid things, Moak
 
Yes!

I see there is a problem with the search... but this has nothing to do with any tricks - and blocking IPs is no solution too!

Do you use Limewire?
Ask the developers, where the problem is - I have no idea!

Morgwen
 
Why didn't you try the search yourself? You would quickly see what I mean:

Today 17:28 CET, two searches with LimeWire 2.13 Beta, being connected to 6 Ultrapeers.

search phrase one: "a beautiful mind divx"
returns 540 files, counting only video files larger than 100MBytes.

search phrase two: "lord of the rings divx"
returns 17 files, counting only video files larger than 100Mbytes.

Do you really believe "a beautiful mind" was that much more popular than "lord of the rings"?

I checked the hits I got from a beautiful minds: almost no firewalled hosts, 50% four-star-results (highest LimeWire-Rating), no repeating IP-addresses. Am I the only one here, who believes that's odd? There is no possibility for such a result to be normal. Somebody's got to be generating bogus-queryhits, so as few people as possible would find the real files.
 
Today 12:08 CET with Xolox 1.12 (after 1 minute)

beautiful mind: 136
beautiful: 719
mind: 936

Today 12:18 CET with Bearshare 2.3.0 (5 connected hosts, after 1 minute each)

beautiful mind: 69
beautiful: 542
mind: 387

Sorry, must be a Limewire specific problem.
 
Searching for beautiful mind (only video) gives 91 results,

Searching for beautiful : 16 results
Searching for mind: 22 results

The question is how can you get more results with a more specific search?
 
May be i should be a little more specific:

I run bearshare 2.4.1, searching only for videos and with the family filter on. (without these settings, you 've got the same effect, but it's not so obvious)

searching for beautiful: 11 results, 2 of them are "a beautiful mind", the rest are totally different files

searching for mind: 23 results, 2 of them are "a beautiful mind"

searching for beautiful mind: 94 results , all of them are "a beautiful mind"

Since the search behaves correctly with other keywords and since unregistered runs limewire, i really think it's not a user/client specific problem, but "a beautiful mind" specific problem.

so i'm just curious to know how some people can hide search results if the search is not specific enough and why they do that.

I also think that only one person/firm is sharing this files.

Altough these "a beautiful mind" files are available on different clients (gnotella, limewire, gnucleus and bearshare), all of the bearshare clients are older one (226, 227 or 230). Today 90 % of bearshare users runs 241. This is a little bit strange too.

i just like to read your opinion.
 
In bearshare is an option under setup/sharing...

Outgoing results! Here you can limit it...

Perhaps this is the problem - I don
 
so, just to show the results i get.

first, a really normal result for beautiful:
http://www.geocities.com/unregistered2/b.gif

and then the flooded one for beautiful mind:
http://www.geocities.com/unregistered2/bm.gif
With the multiple sources, there is actually much more than 94 results.

And the speed values are also random, there is no 56, 256, 512 kbps.
 
Hmm...

ask Vinnie about this... I have really no idea...

I know you can limit the search results in bearshare but that seems not be a problem here - you got a lot of bearshare replies!

So the best is ask Vinnie!

www.bearshare.net

Morgwen
 
Back
Top