Would you be willing to share some good resources for identifying rework traffic beyond IP? I have seen things in my little snitch logs I wonder about but no real recourse.