Forensic P2P scans peer-to-peer networks for shared files matching a specified search word. Forensic P2P can pass the resulting file hashes to your database of known illegal material to check for matches. Forensic P2P operates on the Gnutella network.

Geolocating

Forensic P2P includes the ability to transate IP addresses to geographic coordinates, and the corresponding city, state (region), and country. Now search results will include the user's location along with their IP address. By providing your location in Forensic P2P's settings, you can filter search results to only show the results that are within a specified distance from you. Learn more about this feature.

How Forensic P2P Compares

Forensic P2P operates very similar to the popular Phex and LimeWire file-sharing programs, but with some important distinctions. The list below highlights the most important differences, and we go in more details on the Forensic P2P Comparison  page.

• Forensic P2P does not permit the uploading of files from your computer.
• Forensic P2P does not (of course) include any type of bundled advertising or spyware that these types of programs are often known for containing.
• Forensic P2P provides the ability to determine the Internet Service Provider (ISP) of a particular IP address (WHOIS).
• Forensic P2P can integrate with Forensic Database to identify shared contraband. (See below for details.)

Forensic Database Integration

Forensic P2P can integrate with Forensic Database  and automatically check search results with the files in Forensic Databases. Files that are matches will be highlighted to get your attention. The files are compared using their hash values. (A hash value is a digital fingerprint that uniquely identifies the file in question. Click here for more on hash values.)

Please contact us  if you are interested in using Forensic P2P with your agency's own database of illegal files instead of using Forensic Database. Because database configurations will vary from agency to agency, we will need to develop this feature for your specific database needs.

Quick Connection to Gnutella Network

We provide a Gnutella webcache that facilitates easy, quick, and reliable connection to the Gnutella network. A webcache is a list of Gnutella nodes that is updated by other Gnutella clients that provide the cache with known available Gnutella nodes.

Quickly Get User and ISP Information

Forensic P2P lets you quickly view information about users' IP addresses and Internet Service Providers (ISP). This information often contains the city and contact information for the ISP which will let you locate the identity of the user sharing the files.

System Requirements

Forensic P2P requires:

• Windows 2000, 2003, XP, Vista
• .NET Framework 2.0 (Free download from Microsoft)
• Administrator access on the computer where Forensic P2P will be installed.
• An internet connection to search peer-to-peer networks.

Additional Information

This product includes GeoLite data created by MaxMind, available from
http://maxmind.com/.

Feedback

We welcome feedback on all of our products. Please tell us what features you like, what features you do not like, and what features you would like to see added.

Availability

The software described on this page is available free of charge to members of law enforcement agencies. Download it by signing in to your account. Commercial licenses are also available.