I do see a lot of traffic for the above rule messages. The Source IP's are using random higher range port numbers. Their Locations are random and target IP's are our internal IP's. I am confused as to how to approach with such logs. Is it safe to allow such traffic ?
Please let me know more about bittorrent traffic in this scenario.