On Wed, Oct 21, 2009, Alex Balashov wrote: > >oh my goodness. You're behind on your reading... > > I didn't mean DPI. I meant in a way that can be inferred from the > headers themselves, and aside from the port number. You don't think that statistical analysis of traffic patterns of your UDP traffic wouldn't identify it as a likely tunnel? :) Adrian