1. centralized trackers. there are only a few really big ones, and connecting to one means obviously, you're running BT
2. traffic spikes - BT does not run anywhere near a constant speed, it tends to go up and down. this is not normal behavior
3. BT runs best with a port open, and typically your stupid end user will not change this setting from default, so its recognizable.
4. BT connections 'swarm' - if someone is opening ten active connections at a time, and then cycling through thousands of IPs, it's probably bittorrent.
5. BT is typically unencrypted, meaning that a network admin could easily sniff for BT specific packets
6. BT does not resemble any other kind of traffic - streaming, downloading, gaming, etc - it's just a very recognizable pattern afaik
conclusion? depending on -how- they detect it you may or may not be able to elude detection by changing ports, restricting your traffic, using IP blocks, etc etc . anyways, there's plenty of other P2P programs and file sharing sites, so I don't see it as a huge problem. for anything legit that is
