Protecting Users' Privacy when Tracing Network Traffic