SOPA Act

I'm relatively certain it is everything, and that they have audits and logs set up for all incoming and outgoing traffic. I never claimed it was an efficient method, and that's why I say they would need probable cause and a lot of information about you already (such as MAC/IP/time of offense), otherwise not only would they not have the authority to view the information (arguable, but legally speaking this is the case), they would have no idea where to even start looking amongst the exabytes of lines of text logs in some of the larger ISPs. A search function can only go so far; even a normal person would collect billions of lines of transit data over the course of 7 years.