There are two aspects to this: 1. Updating the rules to classify (newer) traffic types. 2. Updating the categories to reflect (newer) reality patterns. Here are some examples: 1. Updating the rules to (correctly) classify (newer) traffic types. 1.1 Amazon AWS (amazonaws), port 4244 and others. 1.2 Ports 12350, 400xx -- whatever? 1.3 L7 errors -- false "skype-out" 2. Updating the categories to reflect (newer) reality patterns. 2.1 Which is the correct "priority" category for Cloud services, etc? 2.2 Should Skype be classified as "malware" rather than "VOIP/Game"? 2.3 Is it sensible to classify games that are well-behaved and *Voice* over IP in the same category as massively parallel P2P games and abusive P2P apps such as Skype, especially HD *Video* (conference) "calls", that take far more resources than "Media" or "Download"?