Efficient application identification and the temporal and spatial stability of classification schema
Snort - Lightweight Intrusion Detection for Networks