1. A method of identifying keepalives from a Transport Control Protocol (TCP) stream, comprising: examining patterns of data sent from and received by a mobile application on a mobile device, wherein the patterns have variable intervals and sizes; performing statistical analyses on the patterns of data sent from and received by the mobile application to detect a pattern that is regular and to detect regular byte sizes; and identifying the keepalives from the TCP stream occurring over the same TCP session based on information relating to the pattern that is detected as regular and the regular byte sizes.