Probably close to 0%. Most observations to be had of how LE act against online criminals are from watching their CP operations. Historically LE see an IP address accessing a site of interest and they automatically think it is the suspect, add the IP to a list of leads and possibly follow through on it with raids. This works out for them probably well over 90% of the time, even today, as most people use no security measures at all. More recently they have started to use WiFi analyzers to see if open WiFi is being used by neighbors, as this is the level of security your average online criminal trying to be secure takes. Between assuming that the IP observed doing illegal shit belongs to the suspect and checking the identified area for open WiFi and using directional antennas to pinpoint the real culprit, LE are probably covered in 95% of cases. Sometimes they used to raid exit nodes , but that is becoming less common in most countries as they are starting to figure out what anonymity networks are. They have tried tracing backwards to suspects through anonymity networks, from the exit and get logs all the way back, but that only works out for them when the target consistently uses a static non-changing path over a period of months usually. Now they seem to mostly just ignore traffic from the networks they have failed to trace back through in the past, and focus their efforts on the people not using any security at all. It is probably horrible to bank on it, because imo Tor really doesn't provide adequate anonymity, but nothing I have seen from much researching into LE tactics and operations leads me to conclude that they are even attempting to do even moderately advanced traffic analysis attacks against people using large free route networks (versus cascade networks, where they will eventually get to their target by going back one node at a time with new court orders all the way back). The fact that they hacked into hidden services to deanonymize them is pretty strong proof that they don't know shit about traffic analysis, actually.