Leakage
Appears to announce full path names.
Announces Gnutella topology, which may (or may not) reflect real-world patterns of association.
Can use any port number – hard to detect, hard to control outbound via firewalls.
Nosy node can record queries, responses.