1. A method of identifying traffic including the steps of: (i) performing a detector function on traffic to determine whether the traffic contains an anomaly; (ii) if an anomaly is detected, dividing the traffic upon which the detector function has been performed into a plurality of sets; (iii) performing the detector function on each set to determine, for each set, whether the anomaly is present; (iv) if an anomaly is present in a set, dividing that set into a further plurality of sets, wherein steps (iii) and (iv) are each performed a plurality of times in an iterative manner.