|
Title: EFW showing local hosts as P2P server. Why? Post by: jpgillivan on Wednesday 06 May 2009, 12:45:05 am The Traffic Analyzer (ntop) shows several of out computers as P2P servers. Even the EFW shows up as a P2P server. Our file server shows up as a P2P server also.
I don't see any P2P software or services running on those workstatons unless they are 1) hidden (running under different name) or 2) spyware/malware etc. We have a software firewall on each workstation as well as Anti-virus/spyware. The anti-virus/spyware scan runs nightly on each workstation so I am fairly confident that they are clean. We are using EFW 2.2 rc3 Anyone else experiencing this same issue? Does it have to do with a specific ports for windows (samaba) file sharing being open? How about Windows Messenger? Title: Re: EFW showing local hosts as P2P server. Why? Post by: mrkroket on Thursday 14 May 2009, 11:47:10 pm I suppose that ntop detects destination ports used by file-sharing programs, and mark that traffic as P2P. If you use Skype or another program that uses a wide range of destination ports, its traffic can be marked as P2P.
|