Traffic to protocol reverse engineering