How to get BitTorrent traffic

[AKW898]

How can I get visibility into blocked P2P traffic? I can't seem to find it in event logs/client applications. BitTorrent is already blocked on my MX but why is it being flagged by ISPs? How can I get clear logs on this?

[PhilipDAth]

Look in the event log, and search on "Content Filtering".  That will show you everything that content filtering is blocking.

I assume you have content filtering configured to block it.

[AKW898]

Yes, I have done this. I got a suggestion to block DoH and DoT, which can sometimes be used to avoid filtering, forcing users to use traditional DNS, which can help better traffic identification. I was able to get some abusers with that.