I'd bet the encrypted traffic is law enforcement of some sort. Best way is to catch radio ID's over a long period of time to track users paired to TGID's to pinpoint agencies.
I have my WS 1098 that runs constantly to do just that task. I'll go thru as see if I can export a data table that can be sorted in Excel.....won't be until the weekend tho!!
Caught this on a Whistler 1098 - Floyd Tower - White Co...............
30139 - ENCRYPTED
44730 - Most likely Pulaski CO SO Jail Transport
53609 - Fed??? - Surveillance Ops ??? - specifically mentions N Little Rock, but TGID is in 72 Washing Co. range
53784 - units in 800 range - police of some sort - Mountain Springs mentioned - 72 Washington Co.??
53790 - ENCRYPTED
53885 - 42 Logan Co. - now in DB