When in watch mode, how does PacketShaper decide which port to use for management access?