Due to the highly dynamic nature of the development and the use of the Internet applications, traditional traffic identification methods based on wellknown port numbers are not appropriate for the identification of new type of Internet application. This paper proposes methodologies for application traffic analysis, such as signature inspection, dynamic port identification. We have incorporated our methodologies into a system, to analyze Internet traffic between our university network and the Internet, and characterize all in/out Internet traffic.