cFosSpeed 3.00

cFosSpeed 3.00 -- 12-May-2006

* Major feature: Added Protocol Layer 7 Detection. From now on, cFosSpeed analyzes traffic based on the transferred data rather than the port number used. This gives cFosSpeed precise traffic analysis capabilities and thereby allows you fine-grained control over your traffic.
cFosSpeed detects the following protocols:

Commonly used: HTTP, FTP, POP3, SMTP, IMAP4
Voice-over IP: RTP, RTCP, SIP
Special protocols: Telnet, SSH, SSL, IRC, DNS, (S)NTP, RPC
Filesharing: eDonkey, Kazaa, Bittorrent, Kademlia, Gnutella(2), Direct Connect
Streaming Media: HTTP-Streams with various Media-Players and RTSP

For each protocol cFosSpeed distinguishes between client and server mode. All protocols can be prioritized individually. In addition there is a "Connections console" giving you real-time information about the current connections and their detected protocols. User data of these connections can also be recorded into a log file for analysis, see session dumping below.

As a by-product you can now use internet connection sharing to connect several computers to the Internet and still have e.g. filesharing traffic prioritized low. The next major release will have additional bandwidth negotiation for multiple PCs connected to a single router.

* New Technology: cFosSpeed is now available as 64-bit version for Windows XP x64 Edition. Driver, Status Windows and Setup and all other components are all true 64-bit programs! The 64-bit version has all the features of the 32-bit version.

* Added firewall functionality. It's off by default. You can switch it on in the cFosSpeed configuration dialogs. This could be useful for x64 users, since there are few firewalls available for that platform.

cFosSpeed firewall is only designed to protect you from the basic threats like malformed packets, source routing and known insecure open ports. Ingress/egress filtering is only in place for WAN (i.e. dial-up), but not for LAN (i.e. router) ports to protect you from IP spoofing. The firewall tries to stealth your PC as good as possible (i.e. make it hard to find out that a live system is at your IP address.)

You can tighten and/or change the firewall rules like you see fit. Have a look at settings.ini (or "spd filter") for the active rules and the explanation in http://www.cfos.de/speed/documentation/filter_exp.htm. "spd fwstat" will show a count of blocked packets and the rules that caused the blocking. FWLOG.TXT contains a dump of the packets.

* Added support for Traffic Shaping for ISDN. From now on ISDN users also benefit from cFosSpeed Traffic Shaping! This makes your ISDN connections more responsive by reducing ping times. All the advantages of the broadband Traffic Shaping are now available for ISDN. Be sure to check that the method for your ISDN connections is set to "ISDN" in cFosSpeed context-menu > connections.

* Added UDP pseudo-connection tracking. UDP packets between two peers are believed to belong to the same connection if they arrive less 10 seconds apart. The pseudo-connections are displayed under "spd cons" as well. The timeout can be adjusted by the udp_timeout gset variable (the variable is in milliseconds).

* Added session dump: you can now dump TCP sessions and UDP pseudo sessions in their own files. This way you can have all packets of one session in one file (and not more). Activate it with "spd gset dump_sessions 2" and switch on TCP payload dumping with "spd gset dump_tcp_data 1" (without TCP data dumps there won't be anything interesting for us to see). The maximum file size is set to 100k, if you want to change it use "spd gset max_session_dump_size 200k" (change "200k" to your liking).

All in one line that is:
spd gset dump_sessions 2; gset dump_tcp_data 1

"spd gset dump_sessions" accepts the following values:
0 don't dump sessions
2 dump, but delete dump file if there was no data excpet TCP SYNs
3 dump like 2, but delete also if l7-protocol is known.
4 dump and never delete dump file

* Added Medium selection to Options/Connections. By selecting the right medium you can help cFosSpeed to be more accurate with its traffic shaping.

* Reworked cFosSpeed connection engine. You can now use multiple connections to the internet simultaneously.
You can even use several routers at the same network adapter. Connection names are indicated as window names in the context menu.
To use several connections provide several ping destinations by setting the parameters "ping_dest=", "ping_dest2=", "ping_dest3=", ... in the [Param]section of cfosspeed.ini. cFosSpeed then maintains connection information for each route which is used for the different ping destinations. As a result cFosSpeed now supports Routing for RAS (RRAS) and VPN. In order to use Traffic Shaping for the actual VPN connection, use a ping destination which is routed via VPN. If you want to use Traffic Shaping on the underlying connection of your VPN use the address of your VPN host as ping destination.

http://www.cfos.de/download/index_e.htm

:)
 
Last edited:
Top