This counts connection attempts matching the eMule peer-to-peer file-sharing protocol specifically. Since eMule primarily shares files rather than tunneling other traffic, a rising count here on a corporate network usually points to policy-violating file sharing, and the bandwidth and liability exposure that comes with shared copyrighted or malicious files, by a specific internal user rather than an external threat. For example, this counter climbing sharply for one internal workstation would be the trigger to identify and address that specific user's file-sharing activity.