Better clients can periodically change between random ports and use encryption. I would expect such a client to require a pretty specific search to be discovere

Better clients can periodically change between random ports and use encryption. I would expect such a client to require a pretty specific search to be discovered. What we can't really protect from is someone watching the global P2P traffic by posturing as another client, but that's a bit more involved than doing a wireshark survey.