Hacker News Reader

Comment by spacecadet | Hacker News Reader

Ive been capturing and analyzing all of my network traffic for years , slowly and methodically blocking ports of ad trackers.

Burn it all down.

View on HN

Blocking ports? Not familiar with any ports advertisers use specifically, most are happy with 80/433.

probably meant "ip" or URLs

"But apparently, making up ports is addictive, because today, RFC 1700 and the Internet Assigned Number Authority (IANA) have defined no less than 1,023 official "well-known ports," and many other unofficial ones to boot. And those are just a subset of a grand total of 65,535 ports."

https://www.iana.org/assignments/service-names-port-numbers/...

Do you know how your firewall works? I run physical ones. The OS on your Mac is basically wide open. An "ip" "domain" "url" can all change, you own the ports...

You won't get tracked if you block ports 80/433/8443, that's a fact.

Sorry for deviating from OP subject -any pointers to a good (https/ssl) traffic analysis guide?

Wireshark/TShark/PShark

I use T/P Shark to store everything in a local graph database and then perform cluster, outlier, etc on it.

IPInfo API for additional details not in the packet. I have scripts that batch process IP addresses.

Um...that's what projects like PiHole are for. Why try to do this by yourself, when you can benefit from cooperative efforts?

I run PiHole at various points in my network as well.

Because I want to.

Sorry all, shit ton of traffic across a wide range of ports all going to marketing servers...

Reply on news.ycombinator.com