easy enough to tell by merely monitoring traffic flow from suspected machine.