The Network News Transfer Protocol or NNTP is an Internet application protocol was used primarily for reading and posting Usenet articles, as well as transferring news among news servers. Now it is a very popular method for illegal file-sharing.
This SonicWALL signature identifies legitimate NNTP traffic.