Comment by codedokode

If you cannot determine the traffic type, you can block it and wait until someone appears with proper documentation and explains what they were sending.