BitTorrent Client Activity signature keeps firing

[Bethuelle]

Hye All,

I'll like to say thank for the answers to all my previous questions.

My IPS (AIP-SSM-10) keeps firing alerts caused by the 11020/0 S367 signature. I searched the server that is said to be at the origin of the traffic but have not found any torrent software on it. What could be at the origin of this.

Thanks for your help.

Damdjo Julie

[IvanPrishvin86 · Accepted solution]

What other software Installed?

Try to check trafic using sniffer

Sent from Cisco Technical Support iPhone App

[Bethuelle]

Thanks for tip. It detected BitTorrent traffic on the said computer