Text this: A two-level method for elephant flow identification