Tor Tunnel Detection

medium Nessus Network Monitor Plugin ID 2542

Synopsis

The remote client just started a Tor tunnel for routing network traffic over the Tor Tunnel network.

Description

The remote client just started a Tor tunnel for routing network traffic over the Tor Tunnel network. The Tor tunnel allows users to run applications such as peer-to-peer clients, instant messaging and web browsers over a single encrypted tunnel. Tor also tunnels and encrypts the DNS requests associated with such applications. By sending traffic over the Tor network, users can bypass corporate policies, firewalls, and guidelines.

Solution

Ensure that the usage of the Tor network is in alignment with corporate polices and guidelines.

See Also

http://tor.eff.org/overview.html

Plugin Details

Severity: Medium

ID: 2542

Family: Backdoors

Published: 1/19/2005

Updated: 6/1/2015