BitTorrent seen in multiple policies

Summary

The process in which the optimizer classifies Bit Torrent traffic.

Overview

BitTorrent traffic may appear to be improperly classified in the "ALL" policy, and it also will classify parts of the conversation as "P2P."

Cause

The optimizer needs to observe the behavior first before it can classify the BitTorrent traffic properly. After which, it will classify the rest of the conversation as "P2P." Also, BitTorrent alters its behavior periodically and will force the Optimizer to classify this new traffic (more than likely because it randomizes ports) as "ALL" again, until it can reclassify it properly as "P2P."

Resolution

This is normal behavior. BitTorrent needs to be properly identified based on our algorithym and L7 definitions.