@Dennis, IMHO. This and all other useless-belong in the garbage tin- Open Source egde security systems cannot handle "dark networks", ever followed what happened to wikileaks when the first DDOS was launched, then the responses came in multiples? Torrents follow the same, trying to always hide from the law, masking ports numbers and sometimes even using reserved application ports via encryption, locations and whatever they can use. For the Torrent end user, they have no idea whats really going on the network. There is a special need, and this need can only be partly implemented at core networks as an ISP or Gateways.
There is Untangle + L7-filter, I have not tried it though.R
D