[LARTC] Detect and mark 'bulk' http traffic

[Andrew Beverley]

To give fast web browsing on my network, I prioritise http traffic by marking it
all into a high priority band ('30'). This generally works quite well, as
unidentified traffic such as p2p falls by default into a lower priority band
('40').

However, I would like to de-prioritise anyone doing large downloads over http,
which currently get high priority. Is there a way I can mark a connection
differently (ie into band '40') once it has got over a certain threshold of
date transfer?

Thanks,

Andy