Hi all: I am looking at a traffic analysis from one of my cisco routers (using nbar protocol-discovery). The top traffic type is "edonkey". We are a small company and I am 100% positive my users are not swapping files across the network. Our border manager server has all ports turned off unless needed for business use, not just set to stateful outbound. So I am wondering if another application is using the same port the cisco identifies as "edonkey"?