... What symbols would I look for if there were something pernicious happening?

You mean aside from the stuff I already mentioned?

ppi_dumper can always help tell you which parts are which parts