>>That's what Michel has been able to detect based on the logs as he wrote in his original message.
>
>I would be interested in how he can detect session timeout within a reasonable timeframe. Timing of session timeouts is unreliable unless there's a logout button, and even then it's unreliable. Not being facetious here... I have a serious interest in this because I could benefit from the knowledge.
>

Would be nice if Michel can re-explain it.

>>>>3. Why Grover's city was Kevin's favorite team?
>>>
>>>Kitty Hawk is a real city. My favorite team is the Hawkeyes. Mike Beane is a Chicago BlackHawks fan. John Baird's favorite character was Hawkeye on MASH.
>>
>>Yes, I know that this is a real city. Still, a weird coincidence.
>
>Not really, IMO. If that's enough to put somebody on the short list of culprits, then I imagine that short list isn't very short. Grover is from North Carolina. Tracy is from South Carolina, and her favorite team is NC Tarheels. Etc etc etc.

It is probably the extra 'evidence', not the original reason for identifying 'suspects'. But I don't know the mechanics here - I can only speculate based on the information that has been disclosed.