In a recent study by the University of Portsmouth in the UK involving 40 computers to act as relays for Tor's hidden services, 83 percent were being used to view child exploitation sites. With the further 24 percent of traffic that was generated by sites such as Agora and other marketplaces, 97 percent of traffic was going to illegal activities.
WhatsUp Gold 2018 uses NetFlow data from routers and switches and looks for what is referred to as the entry or exit nodes in the Tor network. A database of these nodes, built into WhatsUp Gold, is updated on a regular basis. The module can alert when any host exceeds a configurable number of connections to known Tor ports during a set period. If WhatsUp Gold notices traffic from these locations, IT gets an alert notification.
"By allowing IT administrators to control access to the dark web by their users, Ipswitch is delivering on its commitment to optimize the security and reliability of our customers' networks," said Greg Mooney, Senior Content Manager at Ipswitch. "We encourage all customers to tune into our Defrag This episode on dark web traffic analysis capabilities in WhatsUp Gold."