High-level description Data processing Build the flow table Collect information on various characteristics Identification of potential P2P pairs Based on the two p2p heuristics Eliminate false positives By other heuristics of non-P2P trafficHigh-level description • Data processing – Build the flow table – Collect information on various characteristics • Identification of potential P2P pairs – Based on the two P2P heuristics • Eliminate false positives – By other heuristics of non-P2P traffic