In one embodiment, a network device comprises a tag processor configured to process a media stream received at the network device. The media stream is sent through a network to a desired destination. The tag processor comprises at least one of a tag inserter module and a tag module. The tag inserter module inserts a tag into the media stream, the tag indicating content of the media stream and the network device providing the tag. The tag module identifies and reports a value of a tag received within the media stream, and forwards the media stream to a user and/or compares the identified value to an expected tag value, and forwards the media stream to a user in the event that the comparison indicates a match. The present invention embodiments further include a method and logic for content tagging of the media stream.