26.4. Statistical Protocol IDentification

SPID (Statistical Protocol IDentification) is a statistical classification engine, used to identify encrypted or obfuscated streams from advanced Peer-to-peer or VPN protocols (ex: BitTorrent RC4 streams).

Family: Behavioral
Over: socks4
Over: socks5
Over: tcp
Over: udp
Revision: 8
Risk level: 1
Tag: Not Used