Read the Snowden docs more closely, there's an express program for automatic identification of VPN traffic patterns.