UR002 Hard drive

I took MR C's disk the disk from the principal an analyzing it. The files fall into 2 categories, encrypted or not. Un-encrypted data includes his web history. The guy was booking airline tickets, 1st class with Singapore airlines to Bankong. This is an expensive ticket to buy on a teacher's salary. Is he really one? And since the guy would knows how to encrypt his data, why leave only this piece of information unprotected?

The rest of the data will take some time to decrypt until my PC matches multiple candidate encryptions of dictionary words against the encrypted text (well I hope the guy was writing in English, cause otherwise it would take so much time to try ALL dictionaries). I start writing up my report to the principal with what I have for now and plan to complete it, when the PC spits out the deciphered text. Upon the principle's request, I speak to no one about this.

I am reluctant to report to him the skype activity I noticed. He did not ask for this check or even bother to listen about the condition of the network at the school. He seemed quite preoccupied. I cannot know the content of the skype sessions, as this data is not stored. Anyhow now that I know that the calls are occurring, I set up a sniffer to copy all packets and intercept the next session. I am wondering what this is all about. Some afternoon sessions have a regular bandwidth usage. Evening session consume barely an audio packets. Seems that there is visual but very little talk. What is this skype-pantomime?