No subject

Wireshark's ability to reconstitute a TCP stream was used to observe the
content being sent and received. I noticed a string that the client sends
out each time it establishes a connection with Tor.  The string is as
follows: Tor1.0 U Client <identity>0

Can anyone speak to this?

------=_Part_60925_15746372.1226285902029
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

I just read this article in the SANS reading room called &quot;Detecting and Preventing Anonymous Proxy Usage&quot;<br><br><a href="http://www.sans.org/reading_room/whitepapers/detection/32943.php" target="_blank">http://www.sans.org/reading_room/whitepapers/detection/32943.php</a><br>

<br>From the article:<br>Wireshark&#39;s ability to reconstitute a TCP
stream was used to observe the content being sent and received. I
noticed a string that the client sends out each time it establishes a connection with Tor.&nbsp; The string is as follows: Tor1.0 U Client &lt;identity&gt;0<br><br>Can anyone speak to this?&nbsp; <br>

------=_Part_60925_15746372.1226285902029--