1. A method comprising: receiving, by a node, traffic being transported via a network; obtaining, by the node and as a result of receiving the traffic, content from one or more packets associated with the traffic; analyzing, by the node, the content to identify one or more attributes associated with the content, the one or more attributes corresponding to at least one of: a network address, information associated with an application or service, information associated with message content, or information associated with software content; determining, by the node, that an attribute, of the one or more attributes, matches one or more particular attributes associated with one or more categories of a plurality of categories of traffic; determining, by the node, a ranking for the one or more categories based on quantities of the one or more particular attributes that match the attribute; identifying, by the node, a category, of the plurality of categories, based on the ranking; associating, by the node, the category and the traffic; and processing, by the node, the traffic based on the associated category.