The QoE monitor in our NPM found Freenet traffic. I'm looking at the server that it is pointing to, and not finding much that is interesting. What are the characteristics of Freenet traffic that NPM is looking for? Is there a wireshark filter that I could use to find the same traffic? This would help me determine if this is a false positive, and which process might be responsible for this traffic.
↧