What Is Torrent File?

What is inside a .torrent

A torrent file is a small metadata file, usually with a .torrent extension, that describes content shared over BitTorrent. It does not contain the content. It lists the file names and sizes, the size of the pieces the content has been split into, a hash for every one of those pieces and, normally, one or more tracker addresses. Some also carry a comment, a creation date and the name of the program that built them, which can hint at who produced the release.

The infohash, the identifier used by magnet links and the DHT, is calculated from part of this metadata. Change the files or the piece layout and the infohash changes too.

Small file, specific content

Because the piece hashes are fixed, a torrent file describes one exact set of bytes. A different encode of the same film, even under an identical name, needs a different torrent. That precision helps rights holders. A torrent file tells an analyst exactly which release is being described, and its file list often shows how the release was packaged: subtitle files, a sample clip, a text file carrying a group's tag, or extra executables that look suspicious and suggest a decoy.

The torrent file, the swarm and the content are separate things

Briefings often blur three targets. The torrent file is the description. The swarm is the group of peers sharing the content right now. The content is the actual copy of the work, held by those peers.

Removing a torrent file from a site cuts off one route to the swarm. It does not delete the content, and the same metadata can be rebuilt from peers through a magnet link. Equally, a torrent file left on a page may point to a dead swarm and lead nowhere, so its presence alone says little about current availability.

Why the piece hashes help verification

For evidence, the piece hashes are the useful part. When an analyst downloads a piece from a peer, the client checks it against the hash in the torrent. That gives a precise way to show that a particular peer supplied part of a particular release, and to tie that release to a verified viewing of the protected work.

Keep the torrent file itself, its infohash and the verification record together in the case file. Without the verification step, a torrent proves only that someone described a set of files with a given name, which is not the same as showing the work was shared.