I've been wondering how they would tell if it was legitimate as well. There are some easy checks that would indicate that it was coming from a legal source like the site it's coming from, but what if I'm downloading from my dropbox account or from a remote backup. How is legitimacy determined then. Do I just get a strike for completely legal activity.
Color's could be used to show which project it's associated with. I've been doing this with my Moleskine lately. I have a differnt color of tab depending on what project that page or section of pages has to do with.
Seems like ISPs will be scanning as well not just P2P monitors, that's why I wonder about something like dropbox or ftp setting it off.