Matching by eclectic attributes - expiration, state, packet size, etc.?

[Thrae]

Working on trying to more explicitly throttle downloads, I was wondering if it's possible to match by more eclectic attributes, such as:

• Expiration - Downloads tend to be >80000
• Time in State - Downloads tend to be in 4:4 for most of their time
• Packet Size - Downloads tend to have large packets

I figure if it's HTTP (80 only), with an expiration of >80000, spending X minutes in state 4:4, having packets which total size of >M, it's likely a download that can be safely throttled.