Well... technical solutions can get you pretty far. Knowing that "there was a TCP connection that lasted 37 minutes and transferred 2 GB of data between IP1:Por

Well... technical solutions can get you pretty far. Knowing that "there was a TCP connection that lasted 37 minutes and transferred 2 GB of data between IP1:Port1 and IP2:Port2 starting at 8PM", is different to "Steve in dorm 612 illegally downloaded Spectre last night".