Identifying P2P Users Using Traffic Analysis

Security Focus: Here's a great article that helps explain and take some of the mystery out of how the various reported P2P statistics are currently being tabulated. 3 popular methods (i.e., Port based analysis, Protocol analysis, Traffic behavior patterns) can be used to decompose hybrid decentralized network UDP traffic...While somewhat technical, I found it very interesting to discover how to find out which hosts are running P2P applications in a decentralized network structure...(Also worth noting, the technique discussed in this article can't be used to identify Bittorrent users.)