Patent ID: 8806002

Claim:
A network device, comprising: a communication interface to receive a first peer-to-peer (P2P) activity record representing a first P2P data flow of P2P activity in a network, the first P2P data flow comprising content information communicated from a first user equipment device (UE) to a second UE via the network, the first P2P activity record comprising information identifying the first P2P data flow; and a processor, connected to the communication interface, to: insert the information identifying the first P2P activity record into a first P2P activity map, wherein the first P2P activity record comprises: a subscriber ID and a flow ID, the subscriber ID comprising an identity of the first UE, and the flow ID comprising an identity corresponding to the content information of the first P2P data flow, associate the first P2P activity map with the subscriber ID and the flow ID of first P2P activity record, compare the first P2P activity map to a P2P pattern of interest, determine a first P2P activity of interest probability based on the comparison of the first P2P activity map with the P2P pattern of interest, the first P2P activity of interest probability comprising a probability that P2P activity of interest is occurring in the network; and generate a system response based on the first P2P activity of interest probability.