Analysts at firms including Symantec (nasdaq: SYMC - news - people ) say an increased amount of traffic on TCP Port 445 may be the result of potential intruders scanning computers for weaknesses and that similar scans have preceded the release of other Internet worms.
Whatever is collected beyond that is dropped into a vault at the end of their shift and later transported to a bank. (For reasons of security, the Port Authority will not disclose the name of the bank or the amount of money dropped into the vault.) Beyond simply collecting cash, toll collectors are required to document every non-E-ZPass customer by pressing relevant buttons on their monitor.