1. A logic encoded in one or more non-transitory computer-readable tangible storage media for execution and when executed operable to perform a method, the method comprising: controlling a computer to identify packets associated with a data stream, where the data stream comprises a sequence of packets transmitted from a source device to a destination device and where the data stream was originated by a voice over internet protocol (VoIP) application; controlling the computer to update a set of characterization data associated with the data stream based, at least in part, on a piece of information associated with the sequence of packets, where the set of characterization data facilitates identifying the VoIP application that originated the data stream; where the set of characterization data comprises a set of classification statistics computed from data specific to the sequence of packets; controlling the computer to assign a data stream classifier to the data stream, where the data stream classifier is determined by comparing a portion of the set of characterization data to a set of identification data upon determining that the set of characterization data indicates that a threshold probability that the data stream is able to be classified has been achieved; and controlling the computer to store an association between the data stream classifier and the data stream and to provide a signal associated with the data stream classifier.