Port and Protocol fields, I'm guessing? Expecting it to be mostly heuristic. :/So will they track at app level. I mean how does it work...
They would not have to strictly monitor traffic, peeking at a few fields in the IP header should be enough.Btw isnt monitoring traffic unless required by legal authorities illegal?