Author Topic: Detecting litecoin pooled mining  (Read 1790 times)

Offline ltcfan

  • Newbie
  • *
  • Posts: 2
Detecting litecoin pooled mining
« on: April 18, 2013, 10:27:55 PM »
Hi everybody,

I recently decided to do some litecoin mining and would like to ask a couple of newbie questions ;)

I already saw articles explaining why solo mining on a laptop is not very promising, and that mining in a pool with better hardware is an alternative. Before I invest into hardware, I would like to try mining in a pool using Linux machines which I can use for now at the university where I am studying.

If I understand correctly, cgminer can do mining in a pool (via HTTP or stratum). The mining program exchanges data with the pool using the getwork or the newly developed getblocktemplate protocol.

Is it correct that the network traffic in negligible?

If I would be mining let's say 12 hours per day (in the night) during a week, can a sysadmin automatically detect these mining activities based on some metric?

Thanks a lot in advance for your answers!


Start mining with your Gridseed asic tomorrow!
For all your mining needs - Hash Master Technology. Over 10,000 units sold.
Take a look around at Hash-Master.com!

Offline shyliar

  • Full Member
  • ***
  • Posts: 385
Re: Detecting litecoin pooled mining
« Reply #1 on: April 20, 2013, 01:56:59 PM »
If the sysadmin is doing his job any suspicious or unusual network traffic should be detected.

Where I work I am fully aware for example of who play games on their computers or access porn. The art of discretion is required when you control network traffic.

The very fact that your asking means you feel that using this computing power for your own use is not moral and/or fear being caught. If that bothers you don't do it. If it doesn't bother you it's all about risk assesment vs potential penalties.
Please support the Litecoin Dev team here https://litecointalk.org/index.php/topic,3874.0.html

Offline shyliar

  • Full Member
  • ***
  • Posts: 385
Re: Detecting litecoin pooled mining
« Reply #2 on: April 20, 2013, 02:01:21 PM »
oops again...why do I keep doing that?
Please support the Litecoin Dev team here https://litecointalk.org/index.php/topic,3874.0.html

Offline Sy

  • Global Moderator
  • Hardcore Member
  • *****
  • Posts: 4036
Re: Detecting litecoin pooled mining
« Reply #3 on: April 20, 2013, 04:52:21 PM »
Good thing if you are the sysadmin 8) ;D

Offline ltcfan

  • Newbie
  • *
  • Posts: 2
Re: Detecting litecoin pooled mining
« Reply #4 on: April 21, 2013, 10:56:16 PM »
If the sysadmin is doing his job any suspicious or unusual network traffic should be detected.
Thanks for your answer.

In the meantime I read on the internet that ssh tunnels can hide tcp traffic to pools. And network bandwidth usage is very low (around 10kB/minute) if the stratum protocol is used according to http://mining.bitcoin.cz/mining-proxy-howto. Would it be easy for the sysadmin to detect something?

The very fact that your asking means you feel that using this computing power for your own use is not moral and/or fear being caught. If that bothers you don't do it. If it doesn't bother you it's all about risk assesment vs potential penalties.
Oh well, I agree about the "moral aspects"))) I just wanted to try)

Offline mr-sk

  • Newbie
  • *
  • Posts: 19
Re: Detecting litecoin pooled mining
« Reply #5 on: April 30, 2013, 09:38:06 PM »
You could use an SSH tunnel, sure. Lots of people are SSH'd into remote machines all day (IRC, remote command line, etc).
That traffic is probably not going to stand out. You could also run a proxy (internet) on port 80 and route your local traffic for mining over port 80 to the proxy, where in turn it would route the traffic to the correct port of the pool.

So;

(your local) --- outbound 80 --- (internet / your proxy:80) --- outbound whatever ---- (pool:whatever)
In that case it would look like typical HTTP traffic. I guess I'm thinking of the bnc days of IRC: http://en.wikipedia.org/wiki/BNC_%28software%29

Though personally I'd just prefer an SSH tunnel.

Offline zylithi

  • Newbie
  • *
  • Posts: 3
Re: Detecting litecoin pooled mining
« Reply #6 on: May 02, 2013, 12:02:37 PM »
You could use an SSH tunnel, sure. Lots of people are SSH'd into remote machines all day (IRC, remote command line, etc).
That traffic is probably not going to stand out. You could also run a proxy (internet) on port 80 and route your local traffic for mining over port 80 to the proxy, where in turn it would route the traffic to the correct port of the pool.

So;

(your local) --- outbound 80 --- (internet / your proxy:80) --- outbound whatever ---- (pool:whatever)
In that case it would look like typical HTTP traffic. I guess I'm thinking of the bnc days of IRC: http://en.wikipedia.org/wiki/BNC_%28software%29

Though personally I'd just prefer an SSH tunnel.

Speaking as a sysadmin...

HIGHLY recommend AGAINST using an ssh tunnel.

If the sysadmin has any kind of competent firewall / IDS setup, ssh will light up like a christmas tree on his screen, more so than "random connection on 8332 port." (Especially if it's a windows shop)

If the sysadmin is even more paranoid, he may have the IDS set up to record any "unusual activity" events, such as using ports outside of typical use.

It's not worth losing your job over.
« Last Edit: May 02, 2013, 12:04:19 PM by zylithi »