5. The method of claim 1 , wherein analyzing the second plurality of packets associated with the second server in the network traffic based on the packet content signature comprises: determining, using the computer, a second packet content signature based on the second plurality of packets; determining a dissimilarity metric of the first and second packet content signatures; and comparing the dissimilarity metric to a pre-determined threshold, wherein the second server is determined as running the network application when the dissimilarity metric is less than the pre-determined threshold.
5. The method of claim 1 , wherein analyzing the second plurality of packets associated with the second server in the network traffic based on the packet content signature comprises: determining, using the computer, a second packet content signature based on the second plurality of packets; determining a dissimilarity metric of the first and second packet content signatures; and comparing the dissimilarity metric to a pre-determined threshold, wherein the second server is determined as running the network application when the dissimilarity metric is less than the pre-determined threshold. 6. The method of claim 5 , wherein the dissimilarity metric of the first and second packet content signatures is determined based on d CDM = C ⁡ ( z i ⁢ z j ) C ⁡ ( z i ) + C ⁡ ( z j ) , where z i and z j represent the first and second packet content signatures, respectively, C(z i ) and C(z j ) represent sizes of compressed outputs of the first and second packet content signatures based on a pre-determined compressor C, respectively, and C(z i z j ) represents a size of a compressed output, based on the pre-determined compressor C, of a concatenated string comprising the first and second packet content signatures.