Identification of traffic flows hiding behind TCP port 80