consequences for student hacking

[Bob Henry <bhenry () BOISESTATE EDU>]

Boise State has a policy restricting the use of network scanners, host
scanners, sniffers, etc. to those approved by the Network Engineer.  The
consequences for violating the policy are described with these words:

Depending on the seriousness of an offense, violation of this policy
can result in penalties ranging from reprimand, to loss of use, to
referral to University authorities for disciplinary action, to criminal
prosecution.

That's the theory.  I'm looking for a reality check.  What do your
institutions do when you catch a student sniffing the wired or wireless
network for userID's and passwords?

Thanks,