The remote server is hosting 'magnet' links.  Magnet links point to a file based on a hash of that file.  The Magnet links are parsed by Torrent clients or special browsers which allow the end user to begin searching for the file on a Peer-To-Peer network.

The remote host has downloaed a .torrent file. Ensure that this activity is in accordance to company policy.

The remote client is downloading a file commonly associated with Peer-To-Peer networks.  Ensure that this activity is in accordance to company policy.  Many torrent files are loaded with malware, as well as violate copyright infringement. The following file was detected:

The remote host has just passed BitTorrent client/server traffic.

The remote host is running the Transmission client.
Transmission is a client application which allows users to quickly download files from multiple locations over the BitTorrent protocol.

The remote host is running a Synapse client.  Synapse is used to connect clients into a Peer To Peer (p2p) network.  

The remote host is running a Manolito peer-to-peer (or MP2P) server application.  Manolito is a proprietary peer-to-peer file sharing protocol that can be used to share or download files.

The remote host is running a Manolito peer-to-peer (or MP2P) client application.  Manolito is a proprietary peer-to-peer file sharing protocol that can be used to share or download files.  

The remote host is running a short message peer-to-peer (SMPP) server application.  This protocol is used to transfer short messages between hosts.

The remote host is running a short message peer-to-peer (SMPP) client application.  This protocol is used to transfer short messages between hosts.

The remote host is running the Limewire server.
Limewire is a P2P application that allows users to quickly download files from multiple locations.  

The remote host is running the gtk-gnutella client.  gtk-gnutella is a Gnutella Peer to Peer (P2P) client that is used to connect to file-sharing networks.

The remote host is running the BearShare client.  BearShare is a Gnutella Peer to Peer (P2P) client that is used to connect to file-sharing networks.

The remote host is running a BitTorrent server.
BitTorrent is a P2P application that allows users to quickly download files from multiple locations.  

The remote host is running a BitTorrent client.  BitTorrent is a client application that allows users to quickly download files from multiple locations.  

The remote host is running the uTorrent P2P BitTorrent server.  This server is used to store and upload files to Peer-To-Peer File Sharing clients.

The remote host is running the uTorrent P2P BitTorrent client.  This client is used for downloading files from a Peer-To-Peer File Sharing network.

The remote host is using Shareaza, a peer-to-peer (P2P) fileshare client.  This version of Shareaza is vulnerable to a flaw in the way that it handles integer values.  An attacker exploiting this flaw would send a malformed query to the Shareaza client.  Successful exploitation would result in the attacker executing arbitrary code on the target system.

The remote client was observed signing into a 'Torrent' P2P network.  This sort of network allows users to upload and download files.

The remote host is running a Bittorrent client. BitTorrent is a client application that allows users to quickly download files from multiple locations.  

The remote client is running ICUII, a peer-to-peer client for messaging and video.  ICUII supports two primary modes: 'Family Oriented' and 'Adult'.  There has been at least one local bug associated with ICUII.

The remote host is running DC++, an open source peer-to-peer client.  The remote host is reported to be prone to a vulnerability where attackers can append data to file transfers.  The details of this flaw are, at the time, undocumented.  It is believed that a successful attack would result in arbitrary code being run on the client machine (after a download is complete).

The remote host is running LimeWire, a Gnutella client used for peer-to-peer file sharing.  The host is running a version of Limewire that is vulnerable to a remote exploit via a parsing error.  An attacker exploiting this flaw would pass the client a specially formatted request which, when processed, would give the attacker the ability to download any file on the Gnutella client. 

The remote host is running eMule, a Peer-To-Peer File Sharing software that allows for uploading and downloading of files.

The remote host is running PeerFTP.  PeerFTP is a peer-to-peer application that utilizes the FTP protocol.  PeerFTP is both a client and a server application. The remote host is offering files for download as well as downloading files.  Further, as the host is running PeerFTP version 5, there is a flaw in the way that passwords are stored.  All passwords are stored locally as plaintext.

The remote host is running a BitTorrent Peer-to-Peer (P2P) Server.  BitTorrent is a protocol for exchanging files in a P2P file sharing network.  The BitTorrent Server is a system that is offering files for download from BitTorrent Clients. 

The remote host is running a BitTorrent Peer-to-Peer (P2P) Client. BitTorrent is a protocol for exchanging files in a P2P file-sharing network.

The remote host is running the BitTorrent P2P protocol.

The remote host is running a version of Open DC Hub, a peer to peer file sharing application, that is vulnerable to a remote buffer overflow. A successful exploit would allow a remote attacker to execute code on the remote host. It must be noted that the remote attacker needs administrative access to this application.

The remote host is running a version of Vypress Messenger, that is vulnerable to a remote buffer overflow.  An attacker exploiting this flaw would only need to be able to send a message or file to the Vypress service (listens on port 7777 by default).  A successful exploit would allow the remote attacker the ability to overwrite and control the program's memory.

The remote host is running 'Zinf' version 2.2.1.  This version of Zinf is reported prone to a remote buffer overflow when downloading a malicious playlist.

The remote host is running MLDonkey, a P2P file sharing software. In addition to the potential illegal use of this software (which can be used to download copyright protected material), this kind of software tend to be bandwidth intensive and may eventually degrade network performance.

The remote host is running KaZaa or Morpheus, which are P2P file sharing software packages. In addition to the potential illegal use of this software (which can be used to download copyrighted material), this type of software tends to be bandwidth intensive and may eventually degrade network performance. 

The remote host is running the SoulSeek Peer to Peer application.  SoulSeek is used to download and share files.  As such, it should be authorized with respect to corporate policies and guidelines.  

The remote host is running DC++, an open source peer-to-peer client.

The remote web server is an OFFSystem client.  OFFSystem (Owner-Free File System) is a distributed file system for peer-to-peer file sharing in which files are stored as randomized data blocks.

The remote host is running the JXTA Client.
JXTA is a P2P application that allows users to quickly download files from multiple locations.

The remote host is running the JXTA Server
JXTA is a P2P application which allows users to quickly download files from multiple locations.  

The remote host is running the Trillian P2P client.

The remote host is running the KazaaClient P2P client. 

The remote host is running the MyNapster P2P client.

The remote host is running the Edonkey P2P client.

The remote host is running Shareaza peer-to-peer software.

The remote host is running the Kazaa P2P client.

The remote host is running the XOLOX P2P client.

The remote host is running the WinMX P2P client. 

The remote host is using Morpheus peer-to-peer software.

The remote host is using Gnucleus peer-to-peer software.

ID	Name	Severity
8069	Magnet Link Detection	info
6394	BitTorrent .torrent File Download Detection	info
6393	BitTorrent .torrent File Download Detection (GET Data)	info
6392	BitTorrent .torrent File Download Detection (POST data)	info
5947	BitTorrent Protocol Traffic Detection	info
5292	Transmission Client Detection	medium
5277	Synapse Client Detection	info
4942	Manolito Peer-to-Peer Server Detection	info
4941	Manolito Peer-to-Peer Client Detection	info
4940	SMPP Peer-to-Peer Server Detection	info
4939	SMPP Peer-to-Peer Client Detection	info
4110	Limewire Server Detection (deprecated)	medium
4086	gtk-gnutella P2P Client Version Detection	info
4085	BearShare P2P Client Version Detection	info
3991	BitTorrent Server Detection	medium
3920	BitTorrent Client Protocol Detection	info
3404	uTorrent Server Detection	info
3403	uTorrent Client Detection	info
3385	Shareaza P2P Fileshare Client Integer Overflow	high
3378	WinComet Detection	info
2872	BitTorrent Web Client Detection	medium
2868	ICUII Peer-To-Peer Client Detection	medium
2813	DC++ < 0.674 File Content Manipulation	medium
2710	LimeWire < 4.8.0 Directory Traversal Arbitrary File Access	medium
2709	eMule Peer-To-Peer File Sharing Server Detection	low
2656	PeerFTP Client Detection	medium
2578	BitTorrent P2P Server Detection	low
2577	BitTorrent P2P Client Detection	medium
2576	BitTorrent P2P Protocol Detection	info
2434	Open DC Hub RedirectAll Value Remote Buffer Overflow	high
2347	Vypress < 4.0 First Message Field Overflow	critical
2327	Zinf .pls File Overflow	medium
1881	MLDonkey Detection	medium
1880	Kazaa or Morpheus Detection (deprecated)	low
5034	SoulSeek Version Detection	info
4557	DC++ Client Detection	info
4554	Owner-Free File System Client Detection	info
4551	JXTA P2P Client Detection	medium
4550	JXTA P2P Server Detection	medium
2063	Trillian Detection	medium
2062	KazaaClient Detection	medium
2061	MyNapster Detection	medium
2060	Edonkey2k Detection	medium
2059	Shareaza Detection	medium
2058	Kazaa Detection	high
2057	Xolox Detection	medium
2056	WinMX Detection (deprecated)	medium
2055	Morpheus Detection	info
2054	Gnucleus Detection	info
2053	Blubster Detection	medium

Detections

Analytics

Peer-To-Peer File Sharing Family for Nessus Network Monitor

info

info

info

info

info

medium

info

info

info

info

info

medium

info

info

medium

info

info

info

high

info

medium

medium

medium

medium

low

medium

low

medium

info

high

critical

medium

medium

low

info

info

info

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

info

info

medium