I spent some time at a university and got to field DMCA complaints. Typically they'd list the file getting shared and a timestamp (often without a timezone) and the university IP/port. They never included their own IP address...
Of course, the traffic was behind a firewall. I had the logs but wasn't about to accuse / punish anyone when there were a bunch of potential students behind any given complaint, and without the other end of the connection I couldn't identify which one for certain.
Funny thing is they refused to give their source IP because they didn't trust us to not leak it to whatever pirates to put on a blocklist.
But of course, I had their source IP because I had the network traffic. Were I in kahoots I'd have just listed all 5 of the possible snitching peers to the badguys.
Of course, the traffic was behind a firewall. I had the logs but wasn't about to accuse / punish anyone when there were a bunch of potential students behind any given complaint, and without the other end of the connection I couldn't identify which one for certain.
Funny thing is they refused to give their source IP because they didn't trust us to not leak it to whatever pirates to put on a blocklist.
But of course, I had their source IP because I had the network traffic. Were I in kahoots I'd have just listed all 5 of the possible snitching peers to the badguys.
Shady and incompetent then, same now I guess.