The research of recent access files allowed to verify that in the examined period of time had been produced 124 files. The analysis has allowed to assert that had been interactivity when, between the hours 6:27 PM and 9:10 PM, the movie "the fabulous world of Amelie" was played through the VLC program. With appropriate procedure of regeneration of the hard disk of the suspect it has been observed that the last opening of the file related to the movie had took place at 6:27 PM of the first November. In conclusion it would have been excluded a human interaction, except for what regarded the vision of the film and the use of the computer 5:32 AM of the next morning. A second and punctual verification has been executed by means of interrogation of Luigi Rizzo, security director of Fastweb spa. It has been particularly verified that Sollecito has a Flat type of contract, not subject to payment based on navigation times, but based on a fixed tax: this means that it doesn't require any authentication and that the session is always opened, while Fastweb can only see if the connection generates traffic and which events have occurred to it. The analysis of the log files generated from the traffic of that on that line has highlighted that almost the totality of the activity carried out towards the net is related to peer to peer/file sharing programs : therefore has been verified if such activity could demand the physical presence of the operator to be carried out. Therefore has come to light that such presence is necessary in phase of search and selection of the files to download. After all It constitutes fact of common experience that once chosen the file to download it's sufficient to let the machine on to carry out the download of the files, such operation, sometimes, requires several hours. Has been moreover verified that there are Fastweb services, that demand the presence of the operator: these are services that demand an authentication of the customer, such as the access to the e-mail fastwebnet.it, the access to the classified sections of the Fastweb portal, the transfer of call, the change of price profile. Once acquired the log files related to the access to such services from part of Raffaele, it has been possible to verify that those services in the examined period of time had not been supplied. Moreover, attested by Dr. Rizzo, the information that the UDP protocol presents in the log files can be related to services such as video, voice and broadcast and that the TCP protocol to other Internet activities, including navigation, it has been verified that in the considered period of time related to the TCP protocol, the activity had been of minimal consistency and attributable to active automatic services, like updates [end p 28] and page refresh on regular intervals, while the UDP protocol could not have been considered compatible with the effective use of a service, considering the few Mbof traffic generated. On such bases it would have had to be restated that the only human interaction had been the one related to the vision of the movie, activated at 6:27 PM and ended at 9:10. The defense has opposed to such verification a report redacted by the advisers Formenti and Lucchetta. It has been supported that actually the time of activation of the movie would not have been the one at 6:27 PM, but the one considered by the Police as the closing time, that is 9:10 PM. It has been deducted that the carried out analysis would have led to the verification of navigation activity on a period of time between 6,26 PM and the 3:33 AM of the next morning.