Run a probe
The probe is the research classifier, not a production service. Use the signed kit from the peer qualification page; verify its signature and checksum before running a binary from it. Do not use an unofficial mirror.
The kit runs nat-probe/2 against a two-address, two-port server, records mapping, filtering and the class result, and emits a redacted local JSON result. The classification describes the access network you actually run it on: no root, no inbound port, and no Docker bridge (the bridge would classify the container network instead).
Read Transport measurement before treating a result as an observation. A single class is not a completed E1 measurement, and a signed self-declaration is not verified independent ownership.