What does the “Users” flag mean on a host?
A. If you go to the “Info about host xxxx” page, there will be data in the “Known Users” section, if it’s acting as a server for certain protocols. In sessions.c, the function updateHostUsers() is used to maintain the list of “users” of a host. In handleSession(), as part of the protocol level analysis, the “user” information for various protocols is pulled out of the packets. Stuff like the “X-Kazaa-Username” header, the “MAIL FROM:” header, etc.