P2P: WinNY Peer Connection

This signature detects a connection between peers using the WinNY file sharing system. WinNY is a popular Japanese file sharing application. File sharing can be a violation of your organization's acceptable use policy. This signature significantly impacts IDP performance and should be used only on a policy inspecting a WAN link and only if you suspect WinNY usage within your network. The recommended action for this signature is to "Drop Connection." This signature is prone to false-positives on LAN traffic. Before reporting false-positives, ensure that: You have applied this signature to your Internet-facing (WAN) links only, and that you are also detecting valid WinNY activity (which would indicate actual WinNY clients were active on your network).

References

URL: http://en.wikipedia.org/wiki/Winny

Short Name

P2P:WINNY:PEER-CONNECT

Severity

Info

Recommended

False

Recommended Action

None

P2P: WinNY Peer Connection

References

Found a potential security threat?