when I disconnected it the traffic stopped so we are assuming that it is. He was able to capture the packet for some of them. Some were checking my email. We also saw one going to Nokia. We did not get a look at the source of the larger bursts from earlier, but we will continue to monitor