Abstract: Disclosed are a process and apparatus for classifying video streams of an online streaming media service in real-time. The process includes processing data packets representing one or more video streams between a service provider and a user access network, generating flow activity data from the packets representing quantitative metrics of network transport activity, and applying a trained classifier to the flow activity data to classify each of the video streams as either a live video stream or a video-on-demand (VoD) stream.