Join Us!

Examination of Azur...
 
Notifications
Clear all

Examination of Azureus/Vuze Config files  

  RSS
Omnius
(@omnius)
Junior Member

Heya,

I've got a case in which the user has been using Vuze to download illegal material on OSX Darwin. I've been able to parse the majority of the config files using the Bencode-Editor but having trouble discerning exactly what each line refers to.

Here's an excerpt of an entry in the 'dlhistoryd.config' file,

ITEM 2(d)[8]
a (i)= 1496354382290
c (i)= 1496359020063
h (b)[20]= Garbled code
n (b)[75]= Torrent name
r (i)= 1496360193881
s (b)[124]= Path to File
u (i)= 4888314154609278976
z (i)= 368915498

I've located the downloaded file and taken a stab at what each line means

a (i)= Unix Time Stamp - Creation Date / Download Start
c (i)= Unix Time Stamp - Modified Date / Download Finished
h (b)[20]= Possibly a hash value? Shows as gibberish in Bencode Editor / X-Ways
n (b)[75]= Torrent name
r (i)= Unix Time Stamp - Last Accessed?
s (b)[124]= Path to File
u (i)= Another time stamp? Unable to match it to any standardised 19-digit Epoch times I was able to find. Minus values are also present.
z (i)= File Size in Bytes

Anyone worked on a Vuze case that can enlighten me? I plan on performing a test myself, but time does not allow for it in this instance.

Quote
Posted : 03/04/2019 8:28 am
watcher
(@watcher)
Member

I've got a case in which the user has been using Vuze to download illegal material on OSX Darwin. I…

Vuze was a rename some time back from Azureus. On my Linux machine, all the logs and history information for Vuze is contained in the hidden directory of ".azureus", note the leading dot.

I don't know what OSX does, but you might want to take a quick look.

ReplyQuote
Posted : 03/04/2019 8:15 pm
Omnius
(@omnius)
Junior Member

I've got a case in which the user has been using Vuze to download illegal material on OSX Darwin. I…

Vuze was a rename some time back from Azureus. On my Linux machine, all the logs and history information for Vuze is contained in the hidden directory of ".azureus", note the leading dot.

I don't know what OSX does, but you might want to take a quick look.

Cheers for replying! Unfortunately I'm unable to locate such a directory within X-Ways.

I can at least confirm the download start/finish times with what I've gotten so far.

ReplyQuote
Posted : 04/04/2019 12:48 pm
Share: