Welcome, Guest. Please login or register.
Did you miss your activation email?
Monday 23 December 2024, 03:45:33 am

Login with username, password and session length

Visit the Official Endian Reference Manual  HERE
14262 Posts in 4377 Topics by 6517 Members
Latest Member: Sandro
Search:     Advanced search
+  EFW Support
|-+  Support
| |-+  General Support
| | |-+  EFW showing local hosts as P2P server. Why?
0 Members and 2 Guests are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: EFW showing local hosts as P2P server. Why?  (Read 11754 times)
jpgillivan
Full Member
***
Offline Offline

Posts: 31


« on: Wednesday 06 May 2009, 12:45:05 am »

The Traffic Analyzer (ntop) shows several of out computers as P2P servers.  Even the EFW shows up as a P2P server.  Our file server shows up as a P2P server also. 

I don't see any P2P software or services running on those workstatons unless they are 1) hidden (running under different name) or 2) spyware/malware etc.  We have a software firewall on each workstation as well as Anti-virus/spyware.  The anti-virus/spyware scan runs nightly on each workstation so I am fairly confident that they are clean.  We are using EFW 2.2 rc3

Anyone else experiencing this same issue?  Does it have to do with a specific ports for windows (samaba) file sharing being open?  How about Windows Messenger? 
Logged
mrkroket
Hero Member
*****
Offline Offline

Posts: 495


« Reply #1 on: Thursday 14 May 2009, 11:47:10 pm »

I suppose that ntop detects destination ports used by file-sharing programs, and mark that traffic as P2P. If you use Skype or another program that uses a wide range of destination ports, its traffic can be marked as P2P.
Logged
Pages: [1] Go Up Print 
« previous next »
Jump to:  

Page created in 0.063 seconds with 17 queries.
Powered by SMF 1.1 RC2 | SMF © 2001-2005, Lewis Media Design by 7dana.com