Towards user recognition by shallow web traffic inspection