giFT to SIMS server

[mortstar]

I'm seeing giFT protocol packets transferring between curriculum laptops and the SIMS server, located on separate domain but the same physical network.

 

http://en.wikipedia.org/wiki/GiFT

 

The above article describes it as a p2p protocol used to connect to different p2p networks.

 

I'm guessing this is a false positive, or should I be worried about some rogue traffic?

[Ste_Harve]

Personally i'd find a laptop that they're coming from and have a look on it for any suspicious software. Are these staff laptops or student laptops?

[mortstar]

Only Staff laptops....on reserved IPs which are allowed to contact the Sims server via the PIX.

 

I'll have a look at the laptops which are throwing up this 'problem'.