While you can get a lot of information about what hosts are doing from stuff like port numbers, packet sizes, and IP addresses, you don’t have visibility into the actual application layer itself–so ...