On the capabilities of application level traffic measurements to differentiate and classify traffic