*Cracks knuckles*
A few ways torrents can be done.
Most basic and ineffective way is to throttle the default torrent ports (6881 - 6999).
Next on the list is to throttle based on the number of connections a client has open from a single port - if you're opening a shedload of connections from the same port it's P2P.
The most resource heavy way is just to look at every single packet until a flow is confirmed as a torrent.
A more elegant way is to snoop traffic between torrent clients and trackers then throttle based on the IPs and ports that the tracker provides the client when it joins the swarm.
Rest entirely depends on the policies that are configured on the device, and please give me the FTPz you leech from kip
